{"report_id":"19c4de90-256e-4073-bc7e-a631c8755b94","version":6,"status":"done","tags":[],"date":"2026-05-30T23:55:26Z","url":{"schema":"http","addr":"advicconsultant.com/","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"advicconsultant.com/","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"title":"Advic Consultant","dom":{"size":39654,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1927)","md5":"7d4da06502305126cdd1dbc8a3f3331c","sha1":"34fb50456d038e561576c3ce807e798fd3016195","sha256":"5a76235cc96be66d12592f0c403cc8049b50cbe081bb8a7bd9afd634a9f2d6d7","sha512":"ef2320f591c5ce2e3e51f0bb0c62993181dc309c2b8fa3ccb157f0e344c1937e13824b6a13a8abee1a3ebd6006ca38beb962d1418de4951e58ac292ebe8ed114","ssdeep":"768:2YHSWMusad7ftn/N6F5UzsU7AGUcG4evEbPy972shfC8m:2YHSWMusad7ftn/N6F5UzsU8GUf4evED","tlshash":"c803873174b8093b001b75c7a025474466bbdb3bde138efaf2ff426547c9ea499072a9","dom_hash":"domhashbac26ba0abf418d5b4208e9dd1971c22","first_seen":"2026-05-30T23:55:32.056186Z","last_seen":"2026-05-30T23:55:32.056186Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"advicconsultant.com/","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T23:55:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"advicconsultant.com","ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"domain_registered":"2021-10-14","domain_rank":0,"first_seen":"2026-05-18T03:22:41.786956Z","last_seen":"2026-05-18T03:22:41.786956Z","alert_count":162,"request_count":54,"received_data":3201944,"sent_data":25021,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6963aec44ab72b6bba4a38e0d46f0e3b","sha1":"a6e09f9809f9527f13ba0a0d8a71ebebb84e0225","sha256":"d281707f9000fa237d812cc7a8f9ac7d4223ef2f5795b8fceddda985b187d21c","sha512":"9197199285e30ecc82be4cad8166507cd9bedf5142e265eba8ed3f4463c8b0502e3ac5cadae0fefad5808ec5a28f5c9618dd02c96d14f32c583cbec7498dbac0","ssdeep":"384:yJfty4HLaW8Tn5/k4kcpNWpVbweOf4c0/mn1a8Ijat1iq8PkPZAjuzdywo8Q9glc:czHJABpU6eOftk/jaiqEuzdCT9ESLsmp","tlshash":"c6b2c767f50428658819f9d69caf115132b4fa7ee0058eb068f7e2b40f7ce4215deacd","size":23871,"data":"","first_seen":"2026-05-19T12:45:35.099553Z","last_seen":"2026-05-30T23:55:32.069387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d4fca91e66955e9013c309b7c638770","sha1":"7d70238eff95d775e48fc60553aaaf61445cf134","sha256":"4173e35ccd19cede4d5d8c1b300c7069575d9ca03b87232633b9db839ecb29c5","sha512":"c5e09a881003981f66763448a1f54d55b5c1d5be101e1a80295ad7b3983a882f92805f750aaa07ef718a47a847da33a3ff63dd97d0cce8542342d8dd08b3dae5","ssdeep":"192:meLx1q1e1XO79dciEK5FKw0Vm7Wgput9mHJNYgJ0YavNA:N1q1e1XOn+KL6m7WgpAmHXbOvNA","tlshash":"9922095a2e1038f640b3132cf9ae89927322c571e5068d41f5f6bdb8576ce9d077aacc","size":10845,"data":"","first_seen":"2026-05-19T12:45:35.106782Z","last_seen":"2026-05-30T23:55:32.068273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"520cd4595111803c7c77a249f0219995","sha1":"a0066f364efe4eba8dd585a9d69c11b450bf8689","sha256":"a1f1fdcf5838cd5093ef5b2323d8e4ae939518feba801dbf5a7ff5c85eee272e","sha512":"6c60e338852506c3348cc220f9954002bb595caf5bc9c9c082ea1e323791583d0d3c695c434aab5391a38ddfedbc86329cf7ceb0f79c5c63117aa829d6e7ddfe","ssdeep":"192:KuN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgHvNIvNA:yqIypeQsZWqfCvNIvNA","tlshash":"05f1738460143d6f0253a35896a680f963fc299c632be8647cff7165089c9dd027feee","size":7936,"data":"","first_seen":"2026-05-19T12:45:35.124628Z","last_seen":"2026-05-30T23:55:32.092388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f915707d36505b4ab740b2fd7496ce11","sha1":"e45bf2bb3dd4999ae92a4f4fbd54716f62a0d2ab","sha256":"2292478394fbb7ab0ba619d3c0fd92b05cf50a5a883effb4ce754ffe58cecac8","sha512":"7c84e6981f6087c91f18c84afae1f698fc29282ea309d1c356d87a2fc62f32dd89a9c969c785744e99cdda442e72f6bc1d4a38e7d9c3e7eb23e5a4322b2a67f8","ssdeep":"","tlshash":"937162d1201a6c1a8c63a34195ef13cba2f1fd283603991d6776b5845accd1d29bbb8d","size":3549,"data":"","first_seen":"2026-05-19T12:45:35.083175Z","last_seen":"2026-05-30T23:55:32.084852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/jquery.v1.12.4.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f807eed2e0b358ee25a32fc65a527425","sha1":"a437249136fd281587e7f111f0e02964720979f3","sha256":"0aa3f91b51cb392bf855e5346e1d1b0e6be09c74d13cdc0aa8ffb62f8b68c18c","sha512":"4637032aa8b67d1de97caf8e9c656664503363a35b04f151ba348656d0ecff1a54ac7101f8252edd7dcdff0b371bef352ed5d24b3c7735eeca1fa5458d6c0dbe","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9p:y4J+03jL5TCOauTwDhFdnCVQNLa98HrX","tlshash":"bf93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2026-05-19T12:45:35.098575Z","last_seen":"2026-05-30T23:55:32.099034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/jquery-core-plugins.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4dd35d2ebae20672d298c9375d84749","sha1":"74a6da0baa7cc94fdbb31e1315f39bf6a27e474f","sha256":"8247e8f208f5009c32d3dc8b59510429ab574478cb19b45ed07454c57271808f","sha512":"227356b8b4f702566f028f41c42a672345c5478b02b97e00e314ddefd2e6bc7283a85f434478016062a26918f80d3f77cb595881d52924ef49a760d5e1bf580c","ssdeep":"3072:tKWsCrLWSfJP4NnxD6cD6xS9ODzgT9zVbmwOcYr:tKWsCvWSfJP4NnDPmwOvr","tlshash":"04e3e889b3553826479bb1b5953f120bb13fa429a505807cb5a9d8de2c79f4c203bfbc","size":156227,"data":"","first_seen":"2026-05-19T12:45:35.131923Z","last_seen":"2026-05-30T23:55:32.074279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2560cb3ca2a4ed678ca00666be2c71d5","sha1":"0703092a3b1cab50919cac05b1ba767abdd8ca9c","sha256":"ac17af9f09d6af0a6bbeef1de2b646049ce0a672e995b5dcfe5db6a6cccae8be","sha512":"ee74be9cb4aef278b0d8da1b523ab8907790bfb59d662dbc547c348522cb5031e1284e20ad82fde9c2fc377d197e1f14c36b02bbda26cdd14ccef05f9c889be2","ssdeep":"1536:LCnzw4tFco78X3hSrk8chnmbtWd2YMdYQ8Mv3xVgnugt9uK5jc7NKi2nz+NwAII2:LCnzXQo7s3hSrk8kmEy6cNKp+qm6f","tlshash":"fc53fa64ba20347654bb2265d03f461572b15c37eb02c4a4e5e7587caff8d89236bf8c","size":62658,"data":"","first_seen":"2026-05-19T12:45:35.147894Z","last_seen":"2026-05-30T23:55:32.087435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da812bc24cce505f599408975f967d78","sha1":"aee46305410f48ec9effc54fccb755e739d61bf1","sha256":"ce3c0d4c884cae8e0fc1ab3af93cdd0d6f3ac0a4a8fcc6ea831cde2cff5ac456","sha512":"094b38ac7c1027ecb53e91ed0098bcbb1cdf9a47699eb0c3775682242d84436a59978320ca4226ae94441f25c0242e25adcb89ab62cfcc017561d8d0a6cec332","ssdeep":"384:r1E6s5Onvzy40Islk/5E7063vCB41b0zoSFahq1i42s43AxgkNvr0dxucMd3L:kIslkxE77vAzo2kVwp","tlshash":"03d2dbebaa665c6250432142c3b98d192138cd72fd23aeda33d690f506c705d36eafd6","size":28420,"data":"","first_seen":"2026-05-19T12:45:35.126821Z","last_seen":"2026-05-30T23:55:32.079642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/slider_v1.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01b21b13701d3aff1cd4c7255f7054a5","sha1":"e8a34d06220216a1cca8e4df8c121e0568238559","sha256":"f8f6d5b62343248a36c40862583015b1c4154f8d7cee0633c3974b60b925af58","sha512":"8bfe0033d3339f95e81214e131906315a9d0ba6438eb988c184af16748cef359a8eec209ecb04da70d29d7b59dcfdf9361eca4c7d012c1253c05e2d2064f6478","ssdeep":"","tlshash":"a55100138966547f5a7b822a9e1a4f00f3b2030f534b5463babd53a41f36412b2c6fdc","size":3160,"data":"","first_seen":"2026-05-19T12:45:35.081311Z","last_seen":"2026-05-30T23:55:32.084034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e9c42989a2a4d4f05ef0320408d4562","sha1":"def9874e9d012149bb3b3994554d8c3b357d7cdf","sha256":"cf2824dd7c8fd5140b9540e2f2f8c7881329809d12375f050ea83e0229af2944","sha512":"930d8b0a2440e0ea6ae2a550562465b54448e5fa43659d51adedb21a8a871db2e15a4842454c4884be873a40d837fe11c79f822ed7947e8102ea046ca61d1480","ssdeep":"96:FwWBcUKcq8/Ho+iPwSKO0728jiNNnDnJh5BEkj0G500LUPatD9acvNOu:3qUKFmo+iY772jphIA0G50GUPmvN7","tlshash":"06d14684a0a87c0615f386c792ce0dd4db65f22a2516e4e56256be2e431ccc237e7fdd","size":6275,"data":"","first_seen":"2026-05-19T12:45:35.084321Z","last_seen":"2026-05-30T23:55:32.085676Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/main.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caff5905e6ccc94e9c479b1a2bbc3b11","sha1":"1e88338b323b22bf1bca5b2a2f73aa1bd916f74b","sha256":"30410432134519920fd52410c48ff857f34cfe4f7795e889f7142d3181fc926e","sha512":"bb1f1907f4187940a4f85a821bfee874dd66da0e0e95e0720752dfdc7880337065559a88de30068ab394e30743d3df7a3f17121868679208459796ca8e020eab","ssdeep":"384:CxCsvav+4+ykyY+1kyYeky3kyYk2kytkeKn885C0TICtA:/v+dzyY+ayYnyUyJPyCeKn8840TrtA","tlshash":"466273c0bfad206f49eaf36af63da141ef3cc832c112717ef1a554240894716626dab9","size":14960,"data":"","first_seen":"2026-05-19T12:45:35.14405Z","last_seen":"2026-05-30T23:55:32.094374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/jquery.themepunch.tools.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8793fa82602c166565262316799e9366","sha1":"80f4d8fc11523133f0da51fb58edeedc2c3a69cf","sha256":"5bb50d058e2d5020723758aceb7cd2f4d95ebffdd6f7615562addedad3303c82","sha512":"1d3a0d699ad43d8877bf5e000dd2c3a069b7a41422f6ae447dec698d45d8b38be27be174ced54ab562d2d9054b42db2cb0d4d129168921242b2da2694f05165a","ssdeep":"1536:XxW4OHKIJrO2XQFCPNw+1WzGtYa1Jse0UnCzcf28I9H3+jM1NKzA8ifRVy9w:XPI5a+w7zGWa1J7nCz/8I9+jyt+w","tlshash":"6aa33aca7251702145d721e5917f0683723ba8aa740e892cf258d9de3d3c9c922fbf76","size":98511,"data":"","first_seen":"2026-05-19T12:45:35.14555Z","last_seen":"2026-05-30T23:55:32.059822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23366804e791ffc534c6a7270764fa66","sha1":"6649558b5db00a298e8ddbaefe80fb038f491681","sha256":"48b69ad752cc98d70ae915d5b9a387e4550d16ecd69cbed2ad16baeba11c2ccb","sha512":"e3ff246b8525e2eec1f72db6708bc1096c1d8c64235f656439c64fc47dbaf0fb1774866244670b652b11bcff76684644cce464b18bda888c8f3e4f7c7dd7035f","ssdeep":"384:SjzdxpS3/2LdfPCNcpl56aPkSFLj26YItsq4dtXPLAjnzG3Ek+ECld6EgOhAOTIa:W5pl/FrJtsq4dtMjzG3IfZIuUt6","tlshash":"0b33b8c6f9102ce581ab8145d1be44693220bf79b103c5b1fd9ad59a1a48f8221fbf7f","size":50178,"data":"","first_seen":"2026-05-19T12:45:35.15126Z","last_seen":"2026-05-30T23:55:32.075176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66256e536530a629cc79d2505b7cffd8","sha1":"26ac226bac984e18fe36e65d47d7a0b7d351e349","sha256":"109947f81d0712b65b0de6cc4dfe5d6c10701356f10c1b98329a0f1fab890934","sha512":"7a6614d5c9e7b1fc6cf5bcade3392c3c4b031f4ae11adf1d9a70785c3df39c9d2db7fd4351d630b071dfd2789e4bff69141c0704dbfafc422c3d293e8e6803b4","ssdeep":"384:AhOOxPBlfo3+X3KqcN12h+dotE7KTUzmFu7jaWIqUB7lR9O2u:AIOxo3+XJcN12h+dq7iopDu","tlshash":"38c2b899769038ab9473667bc06a40b532728a357307ee6078efa6f0057ccd913e7e4c","size":26073,"data":"","first_seen":"2026-05-19T12:45:35.105047Z","last_seen":"2026-05-30T23:55:32.078825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee5021188a632153bf47d66f536ee2ec","sha1":"978128b1f0567aca7aab3858002742ba7a40fecd","sha256":"95097aceb9dc03451478d7480cf7fb4505d80aebd61d36b14ce9e4bd2646be5d","sha512":"d9ab9598a78566dcec40902c71111074c16d966ae9ee76aac86f2668cecda3a7efc6c699d1bcb52b244d751e289c82084be04aea8d3770518f30bc254f2c66d8","ssdeep":"192:lQHPaV+cME6uLnm8ZbYl+z1i2VJS/gwBVaNTw:lHn6ehi2Iz8U","tlshash":"9a02a542f1056cbf4467a5a9e83b02d2b171b59c6205aef4f067f5a86c3cb6204cb7ec","size":8903,"data":"","first_seen":"2026-05-19T12:45:35.149768Z","last_seen":"2026-05-30T23:55:32.061144Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/bootstrap.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edc63a9e615a46cf708ceb693cc462c2","sha1":"e1058789d57026a5b5553ca2b4fbe04ef2dfc1c2","sha256":"a449e755af98e590b28a33c1e7b96a229b791400606a2bf235b975633c85b170","sha512":"d2adc27af282bd000e66b09d0833416d4d29f916a1b6e1ceef017e19ee092675bb1fdc557885a87c5efd9a8c5fb0400ba58c91d88aa47388a05f1680210a4191","ssdeep":"768:qDYbgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIrPn:qDjh03Lo+SbZ/AfYqkm2KIr/","tlshash":"d933b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","size":50739,"data":"","first_seen":"2026-05-19T12:45:35.140591Z","last_seen":"2026-05-30T23:55:32.078044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"advicconsultant.com/css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nlocation: https://advicconsultant.com/css/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T11:49:10.489435Z","times_seen":17816844,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/owl.carousel.min.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 917\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184), with CRLF line terminators","md5":"b9755c9c2613c455154caf065bd1a94d","sha1":"aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64","sha256":"062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4","sha512":"dc35560a766631f3b508d0e280fb95f746d9940b48565487932ea6c1ac97f5436d0ecf3b59ebc2ba2c4f21f7c5b963b4671a7f3e56745860cd1244d207fbcc6a","ssdeep":"","tlshash":"a361cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T17:13:40Z","last_seen":"2026-08-10T10:26:29.495977Z","times_seen":7116,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/responsive.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Apr 2020 17:21:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1255\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6870,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"9fb93e74046786f216b5f806d6a612e9","sha1":"0a35109d6d1ca260a7418019ed22b94ced3db22f","sha256":"4369ae709325e2fefedeb23df2ed31929e66ae1a3986047c1be3a2fec29b9238","sha512":"f76c0f300ef852f8e075d3a19007d183b301957e60a130e202b28ac35f7728af6b5bfeeae8b5644c7baa547e283541e7a5198c0c56ea6a8bf7c8991d2aa2821f","ssdeep":"96:BNk+CH6zHD2IYzwtvX0K5TOGnNQqeaDUsWO18:BNk+CH6zHVYzwtvX9OENYaI/OS","tlshash":"08e13902b042204d87867690a77b5c70ad74e572a2ebf1feed605409c5e8e8c56f29ce","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-05-30T23:55:32.058777Z","times_seen":3,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/jquery.themepunch.tools.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:09:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32597\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98511,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25522)","md5":"8793fa82602c166565262316799e9366","sha1":"80f4d8fc11523133f0da51fb58edeedc2c3a69cf","sha256":"5bb50d058e2d5020723758aceb7cd2f4d95ebffdd6f7615562addedad3303c82","sha512":"1d3a0d699ad43d8877bf5e000dd2c3a069b7a41422f6ae447dec698d45d8b38be27be174ced54ab562d2d9054b42db2cb0d4d129168921242b2da2694f05165a","ssdeep":"1536:XxW4OHKIJrO2XQFCPNw+1WzGtYa1Jse0UnCzcf28I9H3+jM1NKzA8ifRVy9w:XPI5a+w7zGWa1J7nCz/8I9+jyt+w","tlshash":"6aa33aca7251702145d721e5917f0683723ba8aa740e892cf258d9de3d3c9c922fbf76","first_seen":"2026-05-19T12:45:35.14555Z","last_seen":"2026-05-30T23:55:32.059822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.actions.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2537\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8667), with CRLF line terminators","md5":"ee5021188a632153bf47d66f536ee2ec","sha1":"978128b1f0567aca7aab3858002742ba7a40fecd","sha256":"95097aceb9dc03451478d7480cf7fb4505d80aebd61d36b14ce9e4bd2646be5d","sha512":"d9ab9598a78566dcec40902c71111074c16d966ae9ee76aac86f2668cecda3a7efc6c699d1bcb52b244d751e289c82084be04aea8d3770518f30bc254f2c66d8","ssdeep":"192:lQHPaV+cME6uLnm8ZbYl+z1i2VJS/gwBVaNTw:lHn6ehi2Iz8U","tlshash":"9a02a542f1056cbf4467a5a9e83b02d2b171b59c6205aef4f067f5a86c3cb6204cb7ec","first_seen":"2026-05-19T12:45:35.149768Z","last_seen":"2026-05-30T23:55:32.061144Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/meanmenu.min.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/meanmenu.min.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Dec 2019 08:22:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 955\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3891,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"99b57de90134f3f798c2ce957f3f21fb","sha1":"1dbbaddd6b7c4ef1050d8435825700a53f61f74f","sha256":"949f67d144aef650533073fa223127b08cf685bc5f1e89e984df2d62354b42fa","sha512":"ee815f032736009487cf7496899e8e127898e4a5f5655d532caa3147b3fbf29cc0ab786a9d30585f187bbc3e1ab14dd99150b5bfd2631ef934af1354b94403ca","ssdeep":"","tlshash":"b081ee64e67b1049b7ab967ce2b1d3287fe0a056df0fc56cb9fce434c184298a0511c9","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-08-09T08:42:12.978611Z","times_seen":42,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":423,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/custom-animation.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/custom-animation.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2020 12:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 636\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c722500741571fa09f88c09b4249ee8f","sha1":"9ce4cda324c11354184da8655c458e5504a3c0a3","sha256":"1bd4469883c3ec7e4e5df4c499bce65a033ef83ae7ab2405354150e35ef5fd6a","sha512":"183efd096f785861f15e19c9f1c547bf02b298c44fa9cc3103b98d1d04effd496f05cd69789e6877e8d775fbafd6c3d0c923905ffbc41934f15d7e21b1133fcc","ssdeep":"","tlshash":"8a6128953842018947221f1197fe4ea48e3cb93359270cee73c6189f47d5b9c678eb6a","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-05-30T23:55:32.062686Z","times_seen":5,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/preloader.svg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/preloader.svg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 25 Jan 2020 11:05:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 601\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b378cfe898cdc40ff889856b47ec5a3","sha1":"384aee3feebc9b0b65494cf6d5cfa4e99137f60a","sha256":"be97dc53364d9f334bd0f6126e024decfa35cb23c6e7108969b540e751ca6bb7","sha512":"4fb420e428a2ed254319586502d971bb392212479692b5b8f555c99ab16f25e2349df66b6612de2b5da384afc4e35511d84a432134c5a7eacba8a8f5e190bffb","ssdeep":"48:cevu2QqXuM4Q5QVRxXuM1u34xXuMwBFBllXuMkfJXuM2B2BXuMZmc6h0XuM5bIX6:bw6WoVwTSe","tlshash":"4f917b7cea01884f47285678e7cf0905245de7674b1b4deab2a1ad3fa4c4a5f80ec35b","first_seen":"2025-08-03T23:37:48.648796Z","last_seen":"2026-05-30T23:55:32.063347Z","times_seen":4,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/fonts/webexicon/fonts/webexicon.ttf","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /fonts/webexicon/fonts/webexicon.ttf HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/fonts/webexicon/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 28 Oct 2019 14:37:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 102728\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":218068,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, webexicon  ","md5":"a5068f32fee9cffe1cdd07e0d33f94bd","sha1":"0e98cc5f05d764452008b8e4b8e9f7481ce553fe","sha256":"5670d95619dfde40434e0987ff59db7c4194de87f7f0b729b60febcb7a6f4e2c","sha512":"033a7599fb887537d51155ef3c0185a4359a1ba47ad5eaf6d1656abe557fb3652c699c2f9d9436bc1a234c321de7a5788d854db51fdfcbaced5afe4b7d38a4ef","ssdeep":"6144:ARreS4JwspqQGa8RKsHirByT4rLg7rG5WXazP4rPeSD38FK6sW7pCcGxz/hd1tH8:BdLmrG5WXazw7eSEiZwfWgzVhVpfHy99","tlshash":"af244a07db8bcf6fec26d7790e2781611eeada31823ed2fd69891d45e0098f44d282d5","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-08-09T08:42:12.937757Z","times_seen":117,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/footer-bg.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/footer-bg.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1097), with CRLF, LF line terminators","md5":"d89f0dc552c0244872180cc230f2d1f0","sha1":"ad7a752612548535cf538285b6f5115ef3278231","sha256":"2d371a846f467a84ebc6bdbf0b31fc0c3420d09ad5b21a477ab7fbcf7378fff9","sha512":"6b03892fd5e8d17929b60d197870b04672b2ccff35907b7502d24663ac2e2d3f91eed952a9482c54f4c7141e79f4a31e01ad050e9c61215b5301c9d6dd4ea12d","ssdeep":"384:NK8A6uNm0hs7BVgJS99TyyKnRmoYUwtO1owtOhLwtOipwtOvtwtOs2XFO6aOHt5K:N5Lk9SLoSrN6ZxZ2Itfw","tlshash":"96c2322179cc493f002306d791265b94e6bbef36dd26c895f2ff07620be5ea4e407266","first_seen":"2026-05-30T23:55:32.064463Z","last_seen":"2026-05-30T23:55:32.064463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/case-study/case-study_03.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/case-study/case-study_03.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:25:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 85535\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85535,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x380, components 3","md5":"79d778e730815aa321744dfcdc50b5eb","sha1":"a2270f160bda2bf8de580ee48cef156584cf0e7d","sha256":"39eff6be9f6027483a35e3696b6844c113f38eb6c397c92dcadcdb28bf657a47","sha512":"b233513ea906c6f3dc5064edf2471f20f75029eb2f211ae46f2e1f51f1dcff0ec0dba00b8948dab5f122e86b3ccc45ba739173afe57ef6aa24a7a5dacd3caa56","ssdeep":"1536:bAqRMzpZytzKSKNJZVcTIDIOx/LGoJD+iQ3jDB/VmPC8VHng/MN3rtm9w:UpGQSk8TI5VDVgB/oWMNRm9w","tlshash":"748312a88e429182ed9f903870071d0b9577fef3af84de8f340e2914ab5f59f505a3a1","first_seen":"2026-05-30T23:55:32.065355Z","last_seen":"2026-05-30T23:55:32.065355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/logo.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Sep 2023 18:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74991\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 934 x 267, 8-bit/color RGBA, non-interlaced","md5":"d71db6485c4321eb3ef0d83b339d956e","sha1":"7febe57b722c695ff8cb8c00171bc44e53a4efcd","sha256":"322f25f96bb443c755bf74da0c72bec4067dbab5723ef6de9a6e34b6aa80a5db","sha512":"0201c90466fd1e7ff5a092afb6527b399d635461b78f3473eae3993c646952d8d6fb7171f7ffa801cd1e8cdf4bd6a129e2cdf2aa2438031a3a1118de1a3fe2c4","ssdeep":"1536:UVavUqNltrIvnNT0ihhE0/+F8LAH09CUMDzHNuTKWW/kgZShQlF:BlltrIvnNgiPd/+FHKCLztuTgkgIho","tlshash":"9373ce5f2aed4fab47a0fd34340a1240172e143fff1a568812e265ab50d89096ddb7ef","first_seen":"2026-05-19T12:45:35.125808Z","last_seen":"2026-05-30T23:55:32.066307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/case-study/case-study_02.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/case-study/case-study_02.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:25:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 62659\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x380, components 3","md5":"721fa94f75a97687d58e6334d7fd12f2","sha1":"00ccd7b14af88fa101d4c9c5bae4623776967dfe","sha256":"eb3453ce5c2cb7d26a14881b4acdb30c7a57b913c94ef99f29741e99e7e34f1c","sha512":"f1ac4ed883954ef608a83152a4fa61feaafbb281e7a63ccd583a50e1b69508d741b0577cd56914dacbb7f9bd38fb382633ed62761b3264cf4f30762c74a7cb7d","ssdeep":"1536:BOrL272DyfNi8m+WccyOpkHIP1eDFAFihDUfFs:syaDx8m+9rOpkHI8DDdos","tlshash":"8f53f2edde7cba541b9e37f958951f904a5b3597fa38133a3e5ed04037254c60d22d80","first_seen":"2026-05-30T23:55:32.067361Z","last_seen":"2026-05-30T23:55:32.067361Z","times_seen":1,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.parallax.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3024\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10845,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10443), with CRLF, LF line terminators","md5":"5d4fca91e66955e9013c309b7c638770","sha1":"7d70238eff95d775e48fc60553aaaf61445cf134","sha256":"4173e35ccd19cede4d5d8c1b300c7069575d9ca03b87232633b9db839ecb29c5","sha512":"c5e09a881003981f66763448a1f54d55b5c1d5be101e1a80295ad7b3983a882f92805f750aaa07ef718a47a847da33a3ff63dd97d0cce8542342d8dd08b3dae5","ssdeep":"192:meLx1q1e1XO79dciEK5FKw0Vm7Wgput9mHJNYgJ0YavNA:N1q1e1XOn+KL6m7WgpAmHXbOvNA","tlshash":"9922095a2e1038f640b3132cf9ae89927322c571e5068d41f5f6bdb8576ce9d077aacc","first_seen":"2026-05-19T12:45:35.106782Z","last_seen":"2026-05-30T23:55:32.068273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.video.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:10:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5981\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23623), with CRLF line terminators","md5":"6963aec44ab72b6bba4a38e0d46f0e3b","sha1":"a6e09f9809f9527f13ba0a0d8a71ebebb84e0225","sha256":"d281707f9000fa237d812cc7a8f9ac7d4223ef2f5795b8fceddda985b187d21c","sha512":"9197199285e30ecc82be4cad8166507cd9bedf5142e265eba8ed3f4463c8b0502e3ac5cadae0fefad5808ec5a28f5c9618dd02c96d14f32c583cbec7498dbac0","ssdeep":"384:yJfty4HLaW8Tn5/k4kcpNWpVbweOf4c0/mn1a8Ijat1iq8PkPZAjuzdywo8Q9glc:czHJABpU6eOftk/jaiqEuzdCT9ESLsmp","tlshash":"c6b2c767f50428658819f9d69caf115132b4fa7ee0058eb068f7e2b40f7ce4215deacd","first_seen":"2026-05-19T12:45:35.099553Z","last_seen":"2026-05-30T23:55:32.069387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/bootstrap.min.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19112\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319), with CRLF line terminators","md5":"46782fcd9220672fd76fe57e840152a1","sha1":"5e1ef9ee953cdf7a8535ee3949d7c5f23f08daeb","sha256":"a841b2eb1a6a24715b7b2f39cc8f09cf146df9b16e961531eefec9ea50325c8c","sha512":"15ca762e90c2dd5f34e44589d945488878e87193819e94a114b068750a5e934c3f7aedc821009d2fe58f941eeb77ddb909e61bd38437ca5731bb562868f7ca9b","ssdeep":"1536:la1bwyUPAy+QYYDnDEBi82NcuSEz/9OOL/gIENM6HN269:01MbPnTLYIENM6HN269","tlshash":"1ed372a7f5a0312da467c61960d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-08-09T08:42:12.975119Z","times_seen":39,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/font-awesome.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/font-awesome.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6634\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30932,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30765), with CRLF line terminators","md5":"0d00e335ee69d6a6c624de689e8a79c6","sha1":"d0ff0fc2245fbeee8958f1e0b1197e59ced9c3ea","sha256":"453e6aed637db38693de9944f4bb5f09d9948cf49074e3c350ed1d382579fecc","sha512":"3e71543655a9d980d0422f71ff7c60364eafa5ea68c02b0927d21357bfe63fc61993b54df330d1e03480fc67bc0238e97bf3884a89ef3d2c2c55c28a9014b517","ssdeep":"384:Mu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:Xlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"63d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226512c5fb9","first_seen":"2023-04-10T18:33:15Z","last_seen":"2026-07-22T10:19:49.568882Z","times_seen":31,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/magnific-popup.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1683\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-08-10T09:51:37.279306Z","times_seen":8016,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/fonts/webexflaticon/Flaticon.woff2","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /fonts/webexflaticon/Flaticon.woff2 HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/fonts/webexflaticon/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 01 Nov 2019 13:55:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49320\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49320, version 1.0","md5":"d8d12f8ce479339cac72e83f4b20bd4b","sha1":"727758505394ac835c672673a5063a72072f2e41","sha256":"6de32458d4892b79818281f08d4af6935490e02c483ea7a4945f38a7047ec24a","sha512":"1fd4910b32cfae8692af5baf75b9a85a15a9050e60a187ffc60abc36ae0bcd7bd33452a5bd9890258fced657f0ba46d862088cc8c42ed2f3075c95d7d93a5731","ssdeep":"1536:hozIqn4QNpktVwVZ/Ownrtr8pDNC3j1lO:hozxfqVwDOerF8NAbO","tlshash":"0f23f190787e6f88e56c9c683f4947c9101946c1bdb33a949f1b2933de9515280cd77f","first_seen":"2023-05-25T12:29:18Z","last_seen":"2026-08-09T08:42:12.948259Z","times_seen":130,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/fonts/revicons/revicons.woff","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/fonts/revicons/revicons.woff HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/revolution/css/settings.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: font/woff\r\nlast-modified: Fri, 18 Mar 2016 08:33:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7536\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7536,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-08-10T11:06:12.773923Z","times_seen":32304,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/bg/abs-bg7.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/bg/abs-bg7.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":26944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1097), with CRLF, LF line terminators","md5":"d89f0dc552c0244872180cc230f2d1f0","sha1":"ad7a752612548535cf538285b6f5115ef3278231","sha256":"2d371a846f467a84ebc6bdbf0b31fc0c3420d09ad5b21a477ab7fbcf7378fff9","sha512":"6b03892fd5e8d17929b60d197870b04672b2ccff35907b7502d24663ac2e2d3f91eed952a9482c54f4c7141e79f4a31e01ad050e9c61215b5301c9d6dd4ea12d","ssdeep":"384:NK8A6uNm0hs7BVgJS99TyyKnRmoYUwtO1owtOhLwtOipwtOvtwtOs2XFO6aOHt5K:N5Lk9SLoSrN6ZxZ2Itfw","tlshash":"96c2322179cc493f002306d791265b94e6bbef36dd26c895f2ff07620be5ea4e407266","first_seen":"2026-05-30T23:55:32.064463Z","last_seen":"2026-05-30T23:55:32.064463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/logo-white.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /logo-white.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Sep 2023 18:13:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29796\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 934 x 267, 8-bit/color RGBA, non-interlaced","md5":"da819fef70c5a9e7b524f82bebd2d92a","sha1":"3f321513cf23b396e7f61ebaf40c85fb3b7485e8","sha256":"32683eeb7870c5913deecd58ae6b6471690c08b2c3e3ed8186bafe7bf75f8864","sha512":"5949077a2de8a6b403c14d19935c80073fc30251bff4f23e39fa6fa77f771aeb22f5b741df450d43b4b20f4905ec160027b6c810b198dc3ddc491d21ce4f3a42","ssdeep":"768:jALKoaVeIvkUjpkgEp1SPZHQ32XE29GuIiOmy0Sbjn:jAaeqjpkR1SPZw4ouIRnn","tlshash":"31d2f16eb4090f56ec838d362c1d35e9cbfe924308978b98e4a6395b3096ecf454473b","first_seen":"2026-05-19T12:45:35.123238Z","last_seen":"2026-05-30T23:55:32.073497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/jquery-core-plugins.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /js/jquery-core-plugins.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:07:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40657\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":156227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019), with CRLF line terminators","md5":"a4dd35d2ebae20672d298c9375d84749","sha1":"74a6da0baa7cc94fdbb31e1315f39bf6a27e474f","sha256":"8247e8f208f5009c32d3dc8b59510429ab574478cb19b45ed07454c57271808f","sha512":"227356b8b4f702566f028f41c42a672345c5478b02b97e00e314ddefd2e6bc7283a85f434478016062a26918f80d3f77cb595881d52924ef49a760d5e1bf580c","ssdeep":"3072:tKWsCrLWSfJP4NnxD6cD6xS9ODzgT9zVbmwOcYr:tKWsCvWSfJP4NnDPmwOvr","tlshash":"04e3e889b3553826479bb1b5953f120bb13fa429a505807cb5a9d8de2c79f4c203bfbc","first_seen":"2026-05-19T12:45:35.131923Z","last_seen":"2026-05-30T23:55:32.074279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12350\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50178,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32005), with CRLF line terminators","md5":"23366804e791ffc534c6a7270764fa66","sha1":"6649558b5db00a298e8ddbaefe80fb038f491681","sha256":"48b69ad752cc98d70ae915d5b9a387e4550d16ecd69cbed2ad16baeba11c2ccb","sha512":"e3ff246b8525e2eec1f72db6708bc1096c1d8c64235f656439c64fc47dbaf0fb1774866244670b652b11bcff76684644cce464b18bda888c8f3e4f7c7dd7035f","ssdeep":"384:SjzdxpS3/2LdfPCNcpl56aPkSFLj26YItsq4dtXPLAjnzG3Ek+ECld6EgOhAOTIa:W5pl/FrJtsq4dtMjzG3IfZIuUt6","tlshash":"0b33b8c6f9102ce581ab8145d1be44693220bf79b103c5b1fd9ad59a1a48f8221fbf7f","first_seen":"2026-05-19T12:45:35.15126Z","last_seen":"2026-05-30T23:55:32.075176Z","times_seen":2,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/case-study/case-study_01.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/case-study/case-study_01.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:25:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79811\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79811,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x380, components 3","md5":"be6b7a163bed2504df8d06b6174c0ba9","sha1":"9762dbc1e9a1913f43f44b939a153f251ab6df2f","sha256":"e9a643781861bdffb7275a2f714acb1307a33872288a0901ab5f751a468017dc","sha512":"9691f54e158ab9f166e30315249f5fa122381f5f8f97990f464e3595c21e5e38ac00dfe68fffeafee2f2b2d1798eac396135fd338ef1181c83536e01f2d9bef0","ssdeep":"1536:aiegehzNut3bCRQJKJPkqQ3AfGi8QsgJSAlsskWe4pp:avLKGRQcsqQgGRUeAX","tlshash":"0d7302899f74fb834b390720989a44fd2f1e1cd0f30b85a3c49b5c479bd962a236da58","first_seen":"2026-05-30T23:55:32.076021Z","last_seen":"2026-05-30T23:55:32.076021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/about/2.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/about/2.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2020 04:56:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 481446\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 570 x 535, 8-bit/color RGBA, non-interlaced","md5":"11cf9525270dfc75733def074c924de5","sha1":"21398b9bc2d8e4e7c7d7dd6f630ecc5b59225c57","sha256":"b93537811ae30c48b99eb203cb6ba476fe98757eee9095f34f5ad9054ff2361d","sha512":"52df0951961d797a263e63e29ffbf3b75e0ead368f8b8f1460b0dfbdb5f2721d4c35ffb03308052e65d365868f7202b4736bfc2c1fa7dd94f26bc918f9d3c6a5","ssdeep":"12288:Tj9zB7kGlxFJyVQyeaZefrw/HNYC4l9K7AMQ+Sy/Lge6mEfpvq2DU6RAue:Tj9zSqLgurw/2l9K7AM1r/wJv+6Rpe","tlshash":"cca423fb76a08c2e3b26ad670161d6c808de5f1e21b7122a8f32da59f9d555c300738e","first_seen":"2026-05-30T23:55:32.077275Z","last_seen":"2026-05-30T23:55:32.077275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/bootstrap.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13383\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50450), with CRLF line terminators","md5":"edc63a9e615a46cf708ceb693cc462c2","sha1":"e1058789d57026a5b5553ca2b4fbe04ef2dfc1c2","sha256":"a449e755af98e590b28a33c1e7b96a229b791400606a2bf235b975633c85b170","sha512":"d2adc27af282bd000e66b09d0833416d4d29f916a1b6e1ceef017e19ee092675bb1fdc557885a87c5efd9a8c5fb0400ba58c91d88aa47388a05f1680210a4191","ssdeep":"768:qDYbgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIrPn:qDjh03Lo+SbZ/AfYqkm2KIr/","tlshash":"d933b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","first_seen":"2026-05-19T12:45:35.140591Z","last_seen":"2026-05-30T23:55:32.078044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6726\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25834), with CRLF line terminators","md5":"66256e536530a629cc79d2505b7cffd8","sha1":"26ac226bac984e18fe36e65d47d7a0b7d351e349","sha256":"109947f81d0712b65b0de6cc4dfe5d6c10701356f10c1b98329a0f1fab890934","sha512":"7a6614d5c9e7b1fc6cf5bcade3392c3c4b031f4ae11adf1d9a70785c3df39c9d2db7fd4351d630b071dfd2789e4bff69141c0704dbfafc422c3d293e8e6803b4","ssdeep":"384:AhOOxPBlfo3+X3KqcN12h+dotE7KTUzmFu7jaWIqUB7lR9O2u:AIOxo3+XJcN12h+dq7iopDu","tlshash":"38c2b899769038ab9473667bc06a40b532728a357307ee6078efa6f0057ccd913e7e4c","first_seen":"2026-05-19T12:45:35.105047Z","last_seen":"2026-05-30T23:55:32.078825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:08:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6403\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28170), with CRLF line terminators","md5":"da812bc24cce505f599408975f967d78","sha1":"aee46305410f48ec9effc54fccb755e739d61bf1","sha256":"ce3c0d4c884cae8e0fc1ab3af93cdd0d6f3ac0a4a8fcc6ea831cde2cff5ac456","sha512":"094b38ac7c1027ecb53e91ed0098bcbb1cdf9a47699eb0c3775682242d84436a59978320ca4226ae94441f25c0242e25adcb89ab62cfcc017561d8d0a6cec332","ssdeep":"384:r1E6s5Onvzy40Islk/5E7063vCB41b0zoSFahq1i42s43AxgkNvr0dxucMd3L:kIslkxE77vAzo2kVwp","tlshash":"03d2dbebaa665c6250432142c3b98d192138cd72fd23aeda33d690f506c705d36eafd6","first_seen":"2026-05-19T12:45:35.126821Z","last_seen":"2026-05-30T23:55:32.079642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/animate.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4463\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80426,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b9bbd4c4bb0196b1166215d9cd6a15c6","sha1":"d2151b604b92c656da5dd8d9092cf28e2d32cb98","sha256":"ed93e04aadc6962f9517417cc7b4dbd940555e1100918778acc89b556b66bf9d","sha512":"2ce0f7170cad9de0a8f9767a7fb9019f380578ec063fe053f9b81f498718670177c3b9cb6ffe40308744c387e8cd1e9232b82ebda5218eb896ee3e8294507b5a","ssdeep":"768:I1A1vYyY21f1NYtY7XXYzYtYOYrVDV5YMYK:dYyYaYtY7XXYzYtYOY9YMYK","tlshash":"da732c5e1d40118447724b29d7de8f68eb3d917318222eee72c2588b8fb6fa853c9d47","first_seen":"2023-04-27T23:29:59Z","last_seen":"2026-08-09T08:42:12.94759Z","times_seen":63,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T23:54:59.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 23:54:59 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":26944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1097), with CRLF, LF line terminators","md5":"d89f0dc552c0244872180cc230f2d1f0","sha1":"ad7a752612548535cf538285b6f5115ef3278231","sha256":"2d371a846f467a84ebc6bdbf0b31fc0c3420d09ad5b21a477ab7fbcf7378fff9","sha512":"6b03892fd5e8d17929b60d197870b04672b2ccff35907b7502d24663ac2e2d3f91eed952a9482c54f4c7141e79f4a31e01ad050e9c61215b5301c9d6dd4ea12d","ssdeep":"384:NK8A6uNm0hs7BVgJS99TyyKnRmoYUwtO1owtOhLwtOipwtOvtwtOs2XFO6aOHt5K:N5Lk9SLoSrN6ZxZ2Itfw","tlshash":"96c2322179cc493f002306d791265b94e6bbef36dd26c895f2ff07620be5ea4e407266","first_seen":"2026-05-30T23:55:32.064463Z","last_seen":"2026-05-30T23:55:32.064463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":340,"dns":47,"connect":142,"send":0,"wait":149,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/css/layers.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/css/layers.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Oct 2019 14:06:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10372\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148599,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6d5e362c1b6ef19820ca10a6cb2f9fde","sha1":"8686e9fbbd586d2eebded0bd9059ac3ebd2fa87f","sha256":"99c157c29cab67190702dad30327b92cc22dcfc390fe6965a9f17d0d025e891f","sha512":"1db367259085595af6471749f93d27180aec72f3f3e3cc4d78b5a38600ab3ec632d5f7699758c8546d493d44970065fc5039916d888342b088f143821e48f6d4","ssdeep":"384:I1AKEHZdKoDFUt6WY42r6rNNRLv3ADqsbJNaNT8KiiOSGO2TK5NTXNG6IPXuuK24:tHTTaNNRxzGTTYIv+Yb8","tlshash":"5de3df61f90541c77077d91833729fc8eb680253ae078a35fbad23648f7c6acaa5179c","first_seen":"2023-05-25T12:29:18Z","last_seen":"2026-08-09T08:42:12.950312Z","times_seen":33,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/css/navigation.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/css/navigation.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Feb 2017 13:42:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7766\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62209,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b7f7468b5021f3e9b8d2cf944b54734c","sha1":"6a6d5c4bf56069d69374eb655afcc77b2c5baf9a","sha256":"8462ab06a93e3bbce6c1d5f69b442bf4aca054e6e062a47796c7e34423fda625","sha512":"65f2b13e1ed497d6d4b80052c8492d2f905a3aefbb6f893f2e62565866486cdb538c2ddba276f43f49a9fcc56930b73c49751c72230e5d8fd5243f742a0e68fd","ssdeep":"1536:CxvHMSBb7OnsUJvTB3oTuMowb0o/VnTIMSW1yyN1SxYvFMC/:a/+9BoSMX/","tlshash":"595365388e466104b233db4497e00baceb398027ea530a9ef79e74c6df6159c51ad7cd","first_seen":"2023-04-11T07:59:58Z","last_seen":"2026-08-09T08:42:12.866952Z","times_seen":293,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/style.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 May 2020 17:37:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13761\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106630,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"de4c5ee5efcc3f1b2f7aad1451d40416","sha1":"046340be3e07323ae46503a313c3c3a452a04886","sha256":"9c4e529604221f0280b3cd611b0a29d35f6ae48d704beee0b4425ae645df51b2","sha512":"01c48b46112c23dfe24c9d7e52bd4764f8319c1335d486e8f175a769e571d27d58442262f6da946b631184e07dbd23d1b8aa79063bab8ee38b0ded2c9836fb89","ssdeep":"1536:rTpvU5Vg2yXUBp0c0Wfh0v0l0R0yFYTWIDT:fmiIf","tlshash":"eba365dcee4511042233cbb9e7d31b15be7c1062ee03056ebfe25859a2c6b6c4276e9d","first_seen":"2026-05-19T12:45:35.120736Z","last_seen":"2026-05-30T23:55:32.083066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/logo-white.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /logo-white.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Sep 2023 18:13:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29796\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 934 x 267, 8-bit/color RGBA, non-interlaced","md5":"da819fef70c5a9e7b524f82bebd2d92a","sha1":"3f321513cf23b396e7f61ebaf40c85fb3b7485e8","sha256":"32683eeb7870c5913deecd58ae6b6471690c08b2c3e3ed8186bafe7bf75f8864","sha512":"5949077a2de8a6b403c14d19935c80073fc30251bff4f23e39fa6fa77f771aeb22f5b741df450d43b4b20f4905ec160027b6c810b198dc3ddc491d21ce4f3a42","ssdeep":"768:jALKoaVeIvkUjpkgEp1SPZHQ32XE29GuIiOmy0Sbjn:jAaeqjpkR1SPZw4ouIRnn","tlshash":"31d2f16eb4090f56ec838d362c1d35e9cbfe924308978b98e4a6395b3096ecf454473b","first_seen":"2026-05-19T12:45:35.123238Z","last_seen":"2026-05-30T23:55:32.073497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/slider_v1.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/slider_v1.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 952\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"01b21b13701d3aff1cd4c7255f7054a5","sha1":"e8a34d06220216a1cca8e4df8c121e0568238559","sha256":"f8f6d5b62343248a36c40862583015b1c4154f8d7cee0633c3974b60b925af58","sha512":"8bfe0033d3339f95e81214e131906315a9d0ba6438eb988c184af16748cef359a8eec209ecb04da70d29d7b59dcfdf9361eca4c7d012c1253c05e2d2064f6478","ssdeep":"","tlshash":"a55100138966547f5a7b822a9e1a4f00f3b2030f534b5463babd53a41f36412b2c6fdc","first_seen":"2026-05-19T12:45:35.081311Z","last_seen":"2026-05-30T23:55:32.084034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.kenburn.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1397\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3549,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3151), with CRLF, LF line terminators","md5":"f915707d36505b4ab740b2fd7496ce11","sha1":"e45bf2bb3dd4999ae92a4f4fbd54716f62a0d2ab","sha256":"2292478394fbb7ab0ba619d3c0fd92b05cf50a5a883effb4ce754ffe58cecac8","sha512":"7c84e6981f6087c91f18c84afae1f698fc29282ea309d1c356d87a2fc62f32dd89a9c969c785744e99cdda442e72f6bc1d4a38e7d9c3e7eb23e5a4322b2a67f8","ssdeep":"","tlshash":"937162d1201a6c1a8c63a34195ef13cba2f1fd283603991d6776b5845accd1d29bbb8d","first_seen":"2026-05-19T12:45:35.083175Z","last_seen":"2026-05-30T23:55:32.084852Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.migration.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:08:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1699\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6275,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5693), with CRLF, LF line terminators","md5":"9e9c42989a2a4d4f05ef0320408d4562","sha1":"def9874e9d012149bb3b3994554d8c3b357d7cdf","sha256":"cf2824dd7c8fd5140b9540e2f2f8c7881329809d12375f050ea83e0229af2944","sha512":"930d8b0a2440e0ea6ae2a550562465b54448e5fa43659d51adedb21a8a871db2e15a4842454c4884be873a40d837fe11c79f822ed7947e8102ea046ca61d1480","ssdeep":"96:FwWBcUKcq8/Ho+iPwSKO0728jiNNnDnJh5BEkj0G500LUPatD9acvNOu:3qUKFmo+iY772jphIA0G50GUPmvN7","tlshash":"06d14684a0a87c0615f386c792ce0dd4db65f22a2516e4e56256be2e431ccc237e7fdd","first_seen":"2026-05-19T12:45:35.084321Z","last_seen":"2026-05-30T23:55:32.085676Z","times_seen":2,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/bg/11.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/bg/11.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 12 Apr 2020 16:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102626\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102626,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"758b558cffbe60a5fa084803acbf91b8","sha1":"05526118506384d5a5b5750ec0d5435e5dc3ee5f","sha256":"016b79bf977157b7a61eacc77807fba68d6c97ffd070d044696af7a5a469fbc3","sha512":"10d93a370881807cdde205e059369fc397470de4b772c85afae7b4ed24e930d21b6cc02dddb3a4dbca8fdd66df910ac31b2f1baab97b982bb7b6097cb975b30e","ssdeep":"1536:tGPS11HZMR0VnRS9Ow/rQuol4Awqf2olwF2dtdqirxzGtHxy5qKQqFN9bvKC:gPS1vnRSz/rW2oWF2dH8tR4fFDP","tlshash":"faa312a1071cd9a8da7490baca2daff928194441715f836f8f8dbb43ed7017b21526f3","first_seen":"2026-05-30T23:55:32.086603Z","last_seen":"2026-05-30T23:55:32.086603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:08:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16660\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32108), with CRLF line terminators","md5":"2560cb3ca2a4ed678ca00666be2c71d5","sha1":"0703092a3b1cab50919cac05b1ba767abdd8ca9c","sha256":"ac17af9f09d6af0a6bbeef1de2b646049ce0a672e995b5dcfe5db6a6cccae8be","sha512":"ee74be9cb4aef278b0d8da1b523ab8907790bfb59d662dbc547c348522cb5031e1284e20ad82fde9c2fc377d197e1f14c36b02bbda26cdd14ccef05f9c889be2","ssdeep":"1536:LCnzw4tFco78X3hSrk8chnmbtWd2YMdYQ8Mv3xVgnugt9uK5jc7NKi2nz+NwAII2:LCnzXQo7s3hSrk8kmEy6cNKp+qm6f","tlshash":"fc53fa64ba20347654bb2265d03f461572b15c37eb02c4a4e5e7587caff8d89236bf8c","first_seen":"2026-05-19T12:45:35.147894Z","last_seen":"2026-05-30T23:55:32.087435Z","times_seen":2,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/fonts/webexflaticon/flaticon.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /fonts/webexflaticon/flaticon.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Nov 2019 14:07:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1504\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11286,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dfc155fdcefdb272de0063a31bdc5517","sha1":"cb8b5d7c8d084b3ef8e127612c82da3fd34a1f80","sha256":"ff90ffaa808d3479239247496bff37dc4bc75f0eea42cd85300b611ca2ca05ee","sha512":"403e93b4f80aa32c6f151ae95064e9aef9bca9eea9bac5a625f47bb7771a4b29948786fd71b9aa4e212d0f42eddcd75225d7394a52dedbd83949da27822b8f30","ssdeep":"48:mYNJ/ZkqGCxCabEXMehoQ3IEkylkw7ROg7CoGmmmg9Fvg2JymvDd7bsmDTtxvZC:mY36GAiQMyIEhlPFymm1qQsgTA","tlshash":"d83239b69bfe21a54b319bc017ab71009b55bc9d8ce0fd6890066f5cf6f1e2983861dc","first_seen":"2026-05-19T12:45:35.133121Z","last_seen":"2026-05-30T23:55:32.088234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/fonts/webexicon/style.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /fonts/webexicon/style.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 24 Nov 2019 19:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6141\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43916,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c08d7483eb14438d06c982cd08ceb91b","sha1":"ab4c37f759f3d3e8c0dd48573ed73220d6b328c4","sha256":"33f709f73219d74d9db667dcf21ef7662f2620069f4aab4a9eefea49c02c32a3","sha512":"7fd3b398d95a1d98f8a41cb3b1937c2324d50eb57d3284897218deb7dfbafe6067758762cc5c7e72c1f34e40dd77157be400f84af74be14bbfbc0a4f520191c7","ssdeep":"768:X3lg8sWpBhJAmg7LjCjjIEOFsjEs/VPp+mHRAPdb8EgH:XGWpBhJTg7LjCjjIEOFsjEKHOVb8EM","tlshash":"6a13a5e5dafd0ca83b20d0d212433550b71d9275cd867e1ad6aa788cb5ee339c58a1fc","first_seen":"2026-05-19T12:45:35.13541Z","last_seen":"2026-05-30T23:55:32.089004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/objects/2.png","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/objects/2.png HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 08 Apr 2020 11:28:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26588\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 285, 8-bit colormap, non-interlaced","md5":"2f7a0c261f95cb70021ac1a0eedf7c98","sha1":"e9b033db8204acbac413377fa0571cb4b89036fe","sha256":"f9bbbc7b5cfc2d0ea9904ab8d64d5a0dee6bb66801f3de719efc56aea4d423c1","sha512":"f2aad54d3d1f12ca2756d3dbf2634d08531d99910c6cf18d432ea81d187f3ca08adae034c57885339629e1aa81f20ebe0863b7832bfc522b6085a252fd40746f","ssdeep":"384:9EAm0jQSIMLl7uIbylppQGiayKSywawhJM6cEIVKUBZ0IHqt/5/RGBiLHP48:6pWLiIbylx8K826oz0jla048","tlshash":"4fc2e16c9691ff1c88960fb955d83b7725a7ba3d9c0821de4236b3b2b3403df80a90d5","first_seen":"2026-05-19T12:45:35.102514Z","last_seen":"2026-05-30T23:55:32.090054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/fonts/fontawesome-webfont.woff2","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/css/font-awesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 21 Oct 2019 08:02:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-10T10:49:18.290257Z","times_seen":529574,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/bg/5.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/bg/5.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:23:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82179\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"a78fcf92dc5cac440bddc5c6803f941d","sha1":"a6d7401bff910fa3f338012ad41f16c779a04551","sha256":"73dce4d4b0eb69eab8c831668841e3fbba6ac7a355eb30cb1ed1810616358691","sha512":"5be8911df1abcb482e5ec642c9cca2164e61a3cbb099adaff18944e1ac220d748ee1e38633678d52f24984619a165942c083f960ad4ac42bbfff279691b305f0","ssdeep":"1536:KzQn2s4i+o4YcSjwgx66w1W8xeOuGAL0u4LCNM5Vrkmaa1fz9iuwGZDsG:b9J4ujwZ5W7OR3yIJRfBtZDf","tlshash":"cc83028dc717ad22c6cd33f0916baf316395ad412976afd2a4c329f7f079464a80251f","first_seen":"2026-05-19T12:45:35.162063Z","last_seen":"2026-05-30T23:55:32.091523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/js/extensions/revolution.extension.carousel.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:35:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2571\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7371), with CRLF, LF line terminators","md5":"520cd4595111803c7c77a249f0219995","sha1":"a0066f364efe4eba8dd585a9d69c11b450bf8689","sha256":"a1f1fdcf5838cd5093ef5b2323d8e4ae939518feba801dbf5a7ff5c85eee272e","sha512":"6c60e338852506c3348cc220f9954002bb595caf5bc9c9c082ea1e323791583d0d3c695c434aab5391a38ddfedbc86329cf7ceb0f79c5c63117aa829d6e7ddfe","ssdeep":"192:KuN8q7sZ9sfpCfQcwaxXTZTn1WUCfl8YafSutLZgHvNIvNA:yqIypeQsZWqfCvNIvNA","tlshash":"05f1738460143d6f0253a35896a680f963fc299c632be8647cff7165089c9dd027feee","first_seen":"2026-05-19T12:45:35.124628Z","last_seen":"2026-05-30T23:55:32.092388Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/css/","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /css/ HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://advicconsultant.com/css/style.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T11:49:10.489435Z","times_seen":17816844,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/bg/1.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:01.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/bg/1.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:23:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 90963\r\ndate: Sat, 30 May 2026 23:55:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90963,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"20b92c824b5154a9d3e05910c653f3ba","sha1":"fecdb20bdf785950c3750d4e96d0f50edc40c546","sha256":"0ff3eac5e860ba08a3e5731c590c4ba7eace58f99dca78aa0a3182352adc58a3","sha512":"cb72cbdaec9496c2bd1b8d757cd2df82857bc95a1814591be4a723926390b568f7388278cbf4e122b77cda3bfb4a18f82bc79bd5194b51d3f8d9b6a24e50568e","ssdeep":"1536:DZ+ZceUI2l0pSqOXjHSRQj4VCZDi+0BKE746rHN0u5oB8M+DpjcHcx/Znxb47umc:DZ+ZcgSqMDSQjdZ2TcElH6B/+Njgc/nd","tlshash":"149312944293ca72fb7a25f044879c03545baf1c352a8db34d09bea32e7172531fc9ab","first_seen":"2026-05-19T12:45:35.139736Z","last_seen":"2026-05-30T23:55:32.093292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/main.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:10:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3116\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"caff5905e6ccc94e9c479b1a2bbc3b11","sha1":"1e88338b323b22bf1bca5b2a2f73aa1bd916f74b","sha256":"30410432134519920fd52410c48ff857f34cfe4f7795e889f7142d3181fc926e","sha512":"bb1f1907f4187940a4f85a821bfee874dd66da0e0e95e0720752dfdc7880337065559a88de30068ab394e30743d3df7a3f17121868679208459796ca8e020eab","ssdeep":"384:CxCsvav+4+ykyY+1kyYeky3kyYk2kytkeKn885C0TICtA:/v+dzyY+ayYnyUyJPyCeKn8840TrtA","tlshash":"466273c0bfad206f49eaf36af63da141ef3cc832c112717ef1a554240894716626dab9","first_seen":"2026-05-19T12:45:35.14405Z","last_seen":"2026-05-30T23:55:32.094374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/revolution/css/settings.css","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /revolution/css/settings.css HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 May 2017 02:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6732\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29201), with CRLF line terminators","md5":"2f91ab4e0cd144c2c50f72e7b69b64a4","sha1":"30f96abeeca5cc51985a3393fc210183a56962b0","sha256":"dc8dc8a1457c54758dd524723d659f963fb61e0ea0cb72a9863f87599e86d659","sha512":"f4bce09b81c65e7bc6df492a41dd5ad0be981e9e236ee9c5bfbf1c5ea294a408bfdf5339e4cb58529d35361eb0940634953bf88ec5cdb4f77fc02ca69f40df6c","ssdeep":"384:ATv/MEow4rLT4ILX8sSeUiOWC7G7C5+TU1Zz80id48fq:AzME0LTPX8sSeFOWCy7wmU1h8D28C","tlshash":"8bd2ca70f88975f877a7c22563d0b7adf02ad123ea520d6ef02f72f986d3046446e658","first_seen":"2026-03-07T05:56:23.898249Z","last_seen":"2026-05-30T23:55:32.095466Z","times_seen":4,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/bg/10.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/bg/10.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 12 Apr 2020 16:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110654\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"d2dae8fd448f2492d5f85bcb7399da48","sha1":"5bd229fb784bff6855b999965ae2c1f4fced05e1","sha256":"c6155290ad193eaeb6debcf8a54bdfb912c2482aab38da4c21c6176b9b86f712","sha512":"f60ab3b271975dfc75cda885a8c9812e37942adc8c41d41cf916150a71852d2a1936d780b7c34110d460175661c3d9a7edbe0ea1569cde1badabb7b0941fd7cb","ssdeep":"3072:JMZ0dUBdJ6vhxtNjCLe+swDkj3NHFVoV5jq4mVxW:JFdA0v/CKH/VoV5jzmC","tlshash":"82b312238bcc6b6ee9cca474840fa770bab75548f4d4c55db4920b173a6ea9da807c48","first_seen":"2026-05-30T23:55:32.09661Z","last_seen":"2026-05-30T23:55:32.09661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/case-study/case-study_05.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/case-study/case-study_05.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:26:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73183\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x380, components 3","md5":"2869a96ae31d27025339848842c6d7bc","sha1":"2d8af2ae96f63f82f34432d64fe69adbdc1c22aa","sha256":"8aaceec5f926b615158dedd7954a49510131d7374ce631b64ff36eaf6701d879","sha512":"233a4c5d2f92ebd192418b1bd41196d7eab6e69826e6f70e6af99461f8a575c4096ce367b0fd8ac8896185b462952d68c09e6d1fb43d277c432c96e5cbc88070","ssdeep":"1536:/EQCzSGN1/kXwOyuAZfDoUKOi4Ej97Pf7YK:/EQkLNuXwhDoUi9bV","tlshash":"ae631207432be8b772b3ab73a02555590773ab4ee341be3a23543fc717a4984b174987","first_seen":"2026-05-30T23:55:32.097447Z","last_seen":"2026-05-30T23:55:32.097447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/images/case-study/case-study_04.jpg","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /images/case-study/case-study_04.jpg HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 08 Apr 2020 11:25:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82969\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x380, components 3","md5":"4a2e78767a27df89488406d95f4aaebc","sha1":"bece4d895e26643064efbf6e02b781824c2a4846","sha256":"f26efc07c1fadeaabc5a8d2345ab569f80db517ae2a3a2de0beaef4be332fe7e","sha512":"80772cf46d2c6cdaf356843c086ed94e9287d1244579f28558316590b2a7339d945ac233fddc2c8de975f70c5a3efe3298579a43e802d65119aa5cd732c65733","ssdeep":"1536:6CArfoHI8kzjn3mOPXvfMGw1OxOKOucQjGKVotAhdvVJN1wBloQ/uZAshA:6bGI33LP8GrrmqVJHaoQ/uVhA","tlshash":"ec8312f2fa523e98f1aa8136013e881427695a43e520c29c7d78af5588c7dfd4871eb3","first_seen":"2026-05-30T23:55:32.098249Z","last_seen":"2026-05-30T23:55:32.098249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"advicconsultant.com/js/jquery.v1.12.4.min.js","fqdn":"advicconsultant.com","domain":"advicconsultant.com","tld":"com"},"ip":{"addr":"68.66.226.94","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://advicconsultant.com/","date":"2026-05-30T23:55:00.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.goalinformatics.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 07:18:15 GMT","end":"Mon, 20 Jul 2026 07:18:14 GMT"},"fingerprint":{"sha1":"77:21:B2:8E:35:BC:5A:CB:9D:BE:FD:B7:BA:FA:D1:19:16:74:50:0E","sha256":"71:54:56:97:B3:75:DC:38:7E:A6:2E:29:35:12:6F:D5:F1:D5:4A:06:90:16:C4:B9:C7:E3:7C:6B:0B:99:B0:36"}}},"request":{"raw":"GET /js/jquery.v1.12.4.min.js HTTP/1.1\r\nHost: advicconsultant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://advicconsultant.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=604800, public\r\nexpires: Sat, 06 Jun 2026 23:55:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Aug 2025 10:07:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32858\r\ndate: Sat, 30 May 2026 23:55:00 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97168,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"f807eed2e0b358ee25a32fc65a527425","sha1":"a437249136fd281587e7f111f0e02964720979f3","sha256":"0aa3f91b51cb392bf855e5346e1d1b0e6be09c74d13cdc0aa8ffb62f8b68c18c","sha512":"4637032aa8b67d1de97caf8e9c656664503363a35b04f151ba348656d0ecff1a54ac7101f8252edd7dcdff0b371bef352ed5d24b3c7735eeca1fa5458d6c0dbe","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9p:y4J+03jL5TCOauTwDhFdnCVQNLa98HrX","tlshash":"bf93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2026-05-19T12:45:35.098575Z","last_seen":"2026-05-30T23:55:32.099034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-30","alert":"Phishing Block","trigger":"advicconsultant.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"advicconsultant.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}