{"report_id":"4fd913f2-beb2-4a39-b1f2-5bc06f45c4a0","version":0,"status":"done","tags":[],"date":"2026-09-20T14:51:59Z","url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":0,"asn":51167,"as":"Contabo GmbH","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"title":"Maxinvesta| Home","dom":{"size":57168,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5549)","md5":"83263f5267bb99312af946ff305ec302","sha1":"8deaa8710db77a1d9167fb72082c4220fb4b206b","sha256":"157027d56ad58918b61b96ed7d0987d56b37bda3467cad6be6d0cd7ddc045aa9","sha512":"075dafa2b338dde41efac94e9acf39ea1c9033674bbcf6ef8fb49ac0db3241bf023066df64957b9a9663507759792dd8c7917fe3b06cb3aa70abfe0dd1937f1f","ssdeep":"768:01oTyF/hrwuFdJkSE1IXN/RjPyPH5HbKH+K0PTl:01oTyFJwiJkSE1IXN/RjPyPH5HjTl","tlshash":"3243c53168f02533016781c65a717f2a3ff18163d21616447bfd8bedaf93ea6d823a48","dom_hash":"domhash0d8fcf281d802627ed89e200f27c6f56","first_seen":"2026-09-20T14:52:21.5659Z","last_seen":"2026-09-20T14:52:21.5659Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":0,"asn":51167,"as":"Contabo GmbH","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T14:51:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.getbutton.io","ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-09-14T09:04:50.189633Z","alert_count":0,"request_count":2,"received_data":443356,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"maxinvesta.com","ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-15","domain_rank":0,"first_seen":"2026-09-20T14:50:14.415578Z","last_seen":"2026-09-20T14:50:14.415578Z","alert_count":98,"request_count":49,"received_data":1677795,"sent_data":26527,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WidgetWhats","description":"WidgetWhats is a fully customizable chat widget with appearance, text, color, button style and position.","website":"https://widgetwhats.com","common_platform_enumeration":"","icon":"WidgetWhats.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.186.192.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-19T00:44:36.498741Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-19T00:44:38.330945Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-19T00:44:37.773955Z","alert_count":0,"request_count":1,"received_data":18558,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-19T00:44:36.838476Z","alert_count":0,"request_count":4,"received_data":378710,"sent_data":1865,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":2,"received_data":53742,"sent_data":1119,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":10,"received_data":470034,"sent_data":5665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-19T05:07:09.834381Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":629,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"maxinvesta.com/js/responsive_bootstrap_carousel.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ff31921cd87f79c608ab17ee10b9edc","sha1":"3735e923e8517c5cb88f4b9fe1980e9eb724075b","sha256":"fdba2d4e3eadb97a843ee534c06ea74bec13ca2e1832fed8e90d46a771e593b6","sha512":"a9f2890691f0d27a43f8508d7eac4c48060c6d6b980616259b3a4c0ba92991dcf620a5bf1451ed1434e3c9380a532327a87bd33dd3b48120893fd4ac955297de","ssdeep":"","tlshash":"ff41af95e99c1a78643f3a776e6b2818f32114534f1646217a6fb15c0f31c0553b6ff8","size":2410,"data":"","first_seen":"2023-03-08T09:53:31Z","last_seen":"2026-09-20T14:52:21.59544Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/pen.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cdae76ee12c969558dd9845f6f0082c","sha1":"27b3559f1d72f11ce17f891e8884a9ac7e19a6c7","sha256":"a4045c14965535336953ec61eefbbfbe859967aefae4a46de6f48573311d0084","sha512":"28f51e4ce6a02c70fde0215be01df536a250e091fd1f86f5e609b9523d511c01ee76c25fd0c2b0cb30394002ccc810489e7f4c33a0c890a2dc78dbc4cff47d1e","ssdeep":"","tlshash":"2231d26885b208a0b87d67e7df7d0280d658a2331547c349b46ce4802ff4901ea4effc","size":1695,"data":"","first_seen":"2024-08-19T16:06:08.617069Z","last_seen":"2026-09-20T14:52:21.594175Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-20T14:52:21.584601Z","times_seen":3143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T16:58:53.389132Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d305895db88eba78b3b5c1ce4fa45ff","sha1":"c1cd3f06cacb04a780147faf962b8b073e2819ba","sha256":"5b3490f271de5e24c81187a9eb4c596585d70c53772b550769a1ae36ebc581a5","sha512":"68d5f5b83d28dae968f350ea41c2d0f1560b4032463670bba92a368b261abb6b5fa1596e3eb3bc3a53234bf47462085d81eff9690c30294022ac9194da20092f","ssdeep":"","tlshash":"bcf0559b2ddba4602d5ba12a177c8e14209231276054c4337dfdc8296f18b9a0a51bb8","size":554,"data":"","first_seen":"2026-09-20T14:50:21.301853Z","last_seen":"2026-09-20T14:52:21.607221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7199361b365e2d0424edf170ee8d2c93","sha1":"64ce8eeb3aa5f0bf39d9b08218679380108b92fe","sha256":"27703fc116a8b03ff8863b2f38e7be4fb365fa9020b029da5f6dadbc5ff30033","sha512":"b4f6c40e9bf2153962e6391cb5c6b2adc6272dcd1064aed501ede557207773a30526aa3e258e941462b1f13e6f60295ffe1798e3abce9d5c02739b6a40b571b3","ssdeep":"","tlshash":"6fd0973a22243234409f366ca52ac13838b0109187a330018ccccc3e1f34eab49a9fdc","size":251,"data":"","first_seen":"2026-09-20T14:50:21.303095Z","last_seen":"2026-09-20T14:52:21.608027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f116cc7a6621f4d4b36b233ec3634675","sha1":"1c48ba7df3bc85152114887d47dbaea203194873","sha256":"b993e4899cb7353300a7efaa52c2795037995ff95aafe3d2b0f216b5cdeb01cd","sha512":"171b4a1411454f6e277f131da5b1caf766df84e1f8b7bf2f4cc35b32ebac092e5a7b6d2db4ab245f3d55d775ac5c902565dd3e871adb9338a3c38b62c32fa01d","ssdeep":"","tlshash":"04e0617d3c3981964b9311f481b7e9393e1b30744068da57989798795cf0fda6d01594","size":416,"data":"","first_seen":"2026-09-20T14:50:21.304342Z","last_seen":"2026-09-20T14:52:21.608914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa1123dd9980923e8de6892330e9f8de","sha1":"5a94010fe02e9a27661ac02673bd02cd384f5856","sha256":"1000a968015b0d30067537e419c7b9d98f943a42eaa5e5c9f59e8cf6b7551299","sha512":"1342d7eaec0a366c52d7f4c9d2e62890906e7d77e63afac4f25a30bffd89f16bcc7da286a65557e7fc3f248eb84a2ad40210817559b414787b9f1baa4f625302","ssdeep":"","tlshash":"9cc04c87b130555e248ae1559796568d72748409053a19292691648a78b3f99031d9e8","size":154,"data":"","first_seen":"2025-06-27T05:34:18.189811Z","last_seen":"2026-09-20T14:52:21.609788Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f62c9bcd8bdf88b653cb15fc313af352","sha1":"7db9ef6ce6f37aa7d6a349bffb6f09ca91e70361","sha256":"ab844e09c950bb4f676cdd00a5e80003bec14a91b3e47b74d3abef64d4604a8d","sha512":"3e2612778a516fd9a26b096e7df4b542c1dd7459365c455883e79e1b61aa2d4e47c4f53cfdddda9fc0448e949c47bae201293df8c3ff34481a2142cf92207322","ssdeep":"","tlshash":"e021867d35dbb0661325e1a30bef084db2903b86177615a0f8bcc8085f54d50597da9c","size":1159,"data":"","first_seen":"2026-09-20T14:50:21.306133Z","last_seen":"2026-09-20T14:52:21.610418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68b3f103ff890f6f5a5bc55839412f6","sha1":"1c80e624612a39761b202f0ac523351392f1632b","sha256":"3fc0df459197e9790da5282744b3735d8aa9174310da5cd0451c3334e25eb0c5","sha512":"c93536c5fea3a72eea9a93f69dd72f79f384481b04c933108197f5f40e52d368fe31d3438fd6677291c7fa2a6ac71656bdbbbe1f493a5f3ae2dd84a2f9b6e1b3","ssdeep":"","tlshash":"2101dd8c9b0e7e2b461b61a1b83ea1d5747c01744c26ac19fd4dc9c0a9a4e885f27e1d","size":763,"data":"","first_seen":"2026-09-20T14:50:21.307278Z","last_seen":"2026-09-20T14:52:21.611252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/jquery.touchSwipe.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"91d00123eb72c7cacc3fbdd03d83762b","sha1":"6b0fcd06196374d8a8f742d5e1663433adbc3b6c","sha256":"f65f3aeed46b79940849fa2022f2cbdf368288de9046f2b3da075c42f9dde8f6","sha512":"34c2ef048bbf51ea56c4f6b4c61f3fc33eb5ad1b4bc31945e81e9ea8a61f80382009176936d78abcc4eed733c47e39af1b40089617efcbd5102a7fbfc9c037e6","ssdeep":"192:sWeHv/p4PUT2uN9MEzdA4KSuAAWF5apIOAJ7j0D0JXYiTlBzT4NYVBgVB7l7lNlk:HQp4PK2uN9GnAAWFcWOAWD0JXYiZBzTp","tlshash":"1f32958e7781b417eadc2274e24f4743253eac9b0a0a84b5e055fda4f9340b4817afcd","size":11576,"data":"","first_seen":"2023-03-07T12:04:52Z","last_seen":"2026-09-20T14:52:21.579411Z","times_seen":565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/theme.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c926ab736922292dad4d319e436814b6","sha1":"9b6bcbf1760b5ce88ba604086ed9fb33868a5a7d","sha256":"86b9f6a2ef3d76235e29997e09e58e36504e01324b6c307d7f27be3f00a1bd7d","sha512":"ca360859184e507265f1a445c925722ad7b8781ffe9af03cadeae9bb38823819c3e20755b6bb06f2dab6072319eb68a92cf91ca29807504d04064cafcd4b88bb","ssdeep":"192:zOCT1VYfrWZQ7Jx7j13T2cZ8c9zEEkPJea:yeYyW7Ec+c9zJkPb","tlshash":"9b025459f05220b658b3337da7bac204fe7a052f500696163eff42e42f779292256f9c","size":8944,"data":"","first_seen":"2024-08-19T16:06:08.606041Z","last_seen":"2026-09-20T14:52:21.603343Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"01cece45c90a71db7d3616eb1b64ee64","sha1":"51ec46279d524491393c8a9d3ef1835c8947b961","sha256":"3a62321995cd73f8e559e86048958d42a12bedd237f56310881e8eff6cfb4ca7","sha512":"952bfdec446a7acfef9800e976fd6c9e12cb56c988c854644015a5b446171d2d90a8ca5c0b42b6399a57e2f952db2b83aace4f2a1b608a7aaaacaa1ee89679b3","ssdeep":"","tlshash":"8f01cb9376d41439c0ad102273bf81a6f8b126e75d3261e0541edc458db0e081faeeb9","size":724,"data":"","first_seen":"2023-03-07T01:10:28Z","last_seen":"2026-09-20T14:52:21.612073Z","times_seen":4665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T16:40:15.912652Z","times_seen":9528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T16:58:53.38587Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/calc.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4189710dce34d8cd049f8078f1af8425","sha1":"dac55782b7a1219e36ea0b50da60ec047680579c","sha256":"e28f1d614ee83db197c161df2de42311ae5b446f6fa0bc4eba8cef5b5e8957e1","sha512":"e609ccc721adea868ecd80eef4db5670b2b6e336f7eceb32329e4200f64b632294d147a99ac91e1f56ac565d7bd4d281bc19fc5a37c7b8f1ac537545a8d120fc","ssdeep":"96:Y3yd2+wfrpmft+wfKmmRXaa+F1FzFjFsQ018Ae:Cyd2+wfdUFfKmmRXawD1Ze","tlshash":"51c1e1e624ae1a5550f17317fbf91205ea3c3a334091a9c2fcde58e66ff1080c655dae","size":5829,"data":"","first_seen":"2024-08-19T16:06:08.613701Z","last_seen":"2026-09-20T14:52:21.597124Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/jquery.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-09-20T15:34:18.938508Z","times_seen":5917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/custom.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5939d5bba0fad1b50a94d96dd9e968d2","sha1":"aad25c3c05892a659abcf407ff538fef193336b4","sha256":"a463220f31ff1469bb9576339e72d5b1d402068078869c6fea10d764af023399","sha512":"94c53085b3b0dd347d281059752818091113812f20e62affa795f3033b264574d2403c4576f5e15d9b620a93c3bc1d0375bbfb68e54a97bd923a49c68538aa15","ssdeep":"192:VSJlmfdPM9mPeXEIDvXMgMJSqG2kBjTaqTqM7FqTqM744pACQ:wrgdomPeXEIbxgSV2qTqM7FqTqM740BQ","tlshash":"10f15504723c16a084bb3739537f9264ea7f8173d9456229b89ec0891fb015cbab7d9f","size":7681,"data":"","first_seen":"2024-08-19T16:06:08.607459Z","last_seen":"2026-09-20T14:52:21.568392Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-20T16:40:32.071615Z","times_seen":758182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/bootstrap.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37051,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-20T14:52:21.581323Z","times_seen":6973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"\u003e longCodeInit","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439085},{"level":"log","text":"\u003e try","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439267},{"level":"log","text":"config loading..10","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"log","text":"validation...false","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":254413},{"level":"log","text":"config loading..500","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826}]},"http":[{"url":{"schema":"https","addr":"maxinvesta.com/css/animate.min.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.487Z","timestamp":1789915884487,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 52799\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":52799,"size_decoded":53042,"mime_type":"text/css","magic":"ASCII text, with very long lines (52592), with CRLF line terminators","md5":"b7d28487cf7d0845cfb3cfc246ef4c51","sha1":"5dfcbcee866e9dc564916416281885f3e320871e","sha256":"26968435703f42f548195e31049e1f621c267346a0295be2bafa457b5904ace9","sha512":"77322a4452d3615fe56b193c3ecbe1f24817c4de9ed351b6eeb74d6daa1a981ff3e2cc6211d4ba40b36ec74575183de1277926c1d2d401eba3e0845db9a4bb5a","ssdeep":"768:KkZcIOIVjl2eIWInPywe1aAvkqDX3oyq5BrieD0OTbsysV:KkZ8Pywe1aAvkqDX3oyq5BrieD0OTq","tlshash":"d43305ae5891129950274f67c7cc5ea8872dc7a714621cde33826c4b8b47fde33da607","first_seen":"2023-04-07T11:48:57Z","last_seen":"2026-09-20T14:52:21.5676Z","times_seen":1675,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":29,"receive":49,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/custom.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.505Z","timestamp":1789915884505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7681\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7681,"size_decoded":7929,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5939d5bba0fad1b50a94d96dd9e968d2","sha1":"aad25c3c05892a659abcf407ff538fef193336b4","sha256":"a463220f31ff1469bb9576339e72d5b1d402068078869c6fea10d764af023399","sha512":"94c53085b3b0dd347d281059752818091113812f20e62affa795f3033b264574d2403c4576f5e15d9b620a93c3bc1d0375bbfb68e54a97bd923a49c68538aa15","ssdeep":"192:VSJlmfdPM9mPeXEIDvXMgMJSqG2kBjTaqTqM7FqTqM744pACQ:wrgdomPeXEIbxgSV2qTqM7FqTqM740BQ","tlshash":"10f15504723c16a084bb3739537f9264ea7f8173d9456229b89ec0891fb015cbab7d9f","first_seen":"2024-08-19T16:06:08.607459Z","last_seen":"2026-09-20T14:52:21.568392Z","times_seen":9,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/wordpress-bg-img.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.518Z","timestamp":1789915884518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/wordpress-bg-img.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 200166\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":200166,"size_decoded":200410,"mime_type":"image/png","magic":"PNG image data, 567 x 560, 8-bit/color RGBA, non-interlaced","md5":"b4168dbdc5f6bf37245b80c4774f641a","sha1":"fba1a1349da9041b5b66c4c1a2b4b8088a2ab413","sha256":"2737e34f494678d476b00972efac48c69d8b998236188e519475e308a5f8765d","sha512":"5a4bc2389224db59ac49f43d192284e2ed12b8c53add9b8c9f60a3d2c69236d9c99fbc143975ee4ae444af09563f8f2b9a2b27eac2fd6941236f7f10bd81a719","ssdeep":"3072:ZL0HMPBB8kRl6EMUSkXvCweIu6yFXfCL9FMCokx8jOkNfbIwTkLgpeoWPr:ZL9uk7a+d7yFPmDLZwTkLnoy","tlshash":"d21423d696dfdad99243a030c05058a84ff03346bb1b5c72f626c36d77921a7eac84cb","first_seen":"2024-08-19T16:06:08.556686Z","last_seen":"2026-09-20T14:52:21.56935Z","times_seen":8,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.232Z","timestamp":1789915885232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:28 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k0AFRX3UwPXzeO4ZDk9elXG1XxxXGfWlxa4vUPcx+2C/XiDQ2qF0CiKHdm8vdLZIkdwawz8\r\nx-77-nzt-ray: e2f754204167d46b15f3af6a3fbcae1f\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 1763\r\nserver: CDN77-Turbo\r\nage: 57\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6053,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T16:40:15.912652Z","times_seen":9528,"resource_available":true,"data":null}},"time_used":3306,"timings":{"blocked":0,"dns":33,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home-1-back.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.343Z","timestamp":1789915885343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home-1-back.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 29480\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29480,"size_decoded":29724,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x600, components 3","md5":"21739073721fe38bd270957d48244731","sha1":"66557bf50059b5b2b81d1fcce91e6dd4f6dd38c2","sha256":"28566551642fa2c727c6a72a43a822dfc4642c5acd8bcd868d74b8712f6be057","sha512":"335be40fdf40a318d21006d11a8452bd79891dfe122a3101eed216bf66bc01ce97761fe9e1618f4918511dc3f3b6d286b1b621da1ba57a78b16e188e2e76d857","ssdeep":"384:pFWwzPIVQaY4CvkbbbIIdLfExO5Yii0J5GQT95+:phPyqZUAMYiX0Q2","tlshash":"59d207369f401c90c9ad17b40dd3fbe037228a57c9eb1b5f16b9c8605cb6651eabb6c0","first_seen":"2024-08-19T16:06:08.579157Z","last_seen":"2026-09-20T14:52:21.570943Z","times_seen":12,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home5-delivery-img.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.344Z","timestamp":1789915885344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home5-delivery-img.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36770\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36770,"size_decoded":37014,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 473x235, components 3","md5":"1c87735b112b3d480ab65d5bcf7e8ae7","sha1":"03d278e5b6ff6b712a33a909409a77224f6c7132","sha256":"ee53afca5cf3aa03ab4196d33035ac40fbc3b04fdb4b6f2ef2eee67edc73ad2e","sha512":"214e92fad4b87150f57639762480022dc89042cce2c237e76c2caa399a3280779391c46e4f829290a7d3dd9eace9363b2cba992e610d616df3013d95b7caf3b2","ssdeep":"384:nPl01b9e+j8U8U0TurjQSl1FtSWTj2g+OGalgK8mZ0vig:sk+vzr0Sl11f2TOVghmZ2","tlshash":"6bf2c0220a6936ccf2636a3151a21e1764e0855732e6af243eddb8839f11ff46d7d3c6","first_seen":"2024-08-19T16:06:08.579835Z","last_seen":"2026-09-20T14:52:21.571924Z","times_seen":9,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home5-technology-img.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.345Z","timestamp":1789915885345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home5-technology-img.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 25908\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25908,"size_decoded":26152,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 473x235, components 3","md5":"a859287612276e9e1a5c83a53588fd51","sha1":"2dae4fdbe52e903820cc2a51f20822df4fb84c49","sha256":"0aadc65d0ae837832720c7ecd0d7ff2dd332b86ee0990389a20ee5a0ae6afd81","sha512":"e398b8ba99f0163eb924a4af8a884683d15f077e2dfcf3437d3901daa7920cb677ed2d7efc0161aa5df62adc85dc0ef5b906fc1c0239c3cd373149147bb5a2a3","ssdeep":"384:sYltVQ1/o5WWwMY7krVD2kQ5jibWt96mJToFyDuOuczEZSiDoYfT9JDSh:sbo5WddYrVZmjzJt3ucz+1DoYfTfSh","tlshash":"35c2f159f3428ee9cdc676025226c2520da74d433b538787bb16363cf82f4a84b8a5e6","first_seen":"2024-08-19T16:06:08.583169Z","last_seen":"2026-09-20T14:52:21.572701Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:32.005Z","timestamp":1789915892005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BPT5w8s3.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-3e9c\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k9r/3fnBLmjjZK8KLB5NOPeDbhYqVqzI3/YDFFJtV0iCvqo5oXGA728zKB0YFp6cRp3HWaw\r\nx-77-nzt-ray: fdb541231231cb2119f3af6a69229c00\r\nage: 454274\r\nx-77-cache: HIT\r\nx-77-age: 454274\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6769,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T16:58:53.389132Z","times_seen":164,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/custom.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.485Z","timestamp":1789915884485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3667\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3667,"size_decoded":3909,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"c376f27b5c4cbf3515a5e8608f598fd7","sha1":"703d2f6dd7358db7b9103c00cc5f1ff329761861","sha256":"5ec8fe9f7141dad0fcbca938979cb3cff4fef604025ebdc9e21f2731b6993557","sha512":"ac8a85a9f8d490ac99dd713594d6d30d8812e1646a7e191ac7f25bbb9f02a14301d01c6d0d57d0a845b77d21e01c28f19ef2893621241808709097a1372f22d6","ssdeep":"","tlshash":"eb71a06df8d244a763374e60036a66d4ffbd60134a001b79fee07a549fb88fa9560e4c","first_seen":"2025-12-30T04:15:40.652372Z","last_seen":"2026-09-20T14:52:21.574161Z","times_seen":5,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":40,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/testimony.mp4","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.411Z","timestamp":1789915885411,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/testimony.mp4 HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 24442577\r\nContent-Range: bytes 0-24442576/24442577\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/responsive_bootstrap_carousel.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.492Z","timestamp":1789915884492,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/responsive_bootstrap_carousel.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 19021\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19021,"size_decoded":19263,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b008c3ed89839eed34f8577ee8e241ff","sha1":"5a7159b092e87a864e0b6f1c171007d93cbcf09c","sha256":"253c18a54213fa24542eadb10c331b9d1c73b94087d35d58d1a4fbee19329e72","sha512":"488f616cfe8b69e94f99da6e89e14e3b0aa6a551b8c32319bddc2607a79d1bf7883c448fb926882b3694408122141810c7ed374b99acde773a8d3b7a92d25871","ssdeep":"384:ThhjgTDSVgSDAVaMava6abaFzIx8ndrVFOIdlPeZ3FYOfH9A9PFakn/5ZequaX6I:dV","tlshash":"4282dc57193a2d6a4602df74e6f30ebcf30a7a708909166af372750e5f194e4726e30e","first_seen":"2025-09-03T17:56:54.626607Z","last_seen":"2026-09-20T14:52:21.575572Z","times_seen":17,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/jquery.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.499Z","timestamp":1789915884499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 97168\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97168,"size_decoded":97417,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-09-20T15:34:18.938508Z","times_seen":5917,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/earth-map.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.519Z","timestamp":1789915884519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/earth-map.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36597\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36597,"size_decoded":36840,"mime_type":"image/png","magic":"PNG image data, 650 x 197, 8-bit/color RGBA, non-interlaced","md5":"964d5dd594fc87fe5037150c521f9966","sha1":"e8a4ad41c81e54314172104c2efb08839edde643","sha256":"9d91a9fa05d9ab29c852cc49a66a8af6b91920879378ad0c562ab2241728c744","sha512":"ba5f511967ded7bbcb9ff90f9100674d6513c0897cf70f5648afab13eba18ab004fe8dc5579563152ebb1e5ce9952c774266a23380462376f66a6a4a717881eb","ssdeep":"768:iddCtpc2IzFm2bar0YNAxxhUW75KhpPW4vHKUvDVVCswl:i3wudM8xhU+KhpPW4vHvDVUsK","tlshash":"81f2f1c41523da0db7236182acf07de97a4a1cceac9c0d3066e575ab766dec07e3408d","first_seen":"2024-08-19T16:06:08.554103Z","last_seen":"2026-09-20T14:52:21.577073Z","times_seen":12,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,300,400,700,600,900%7COpen%20Sans:100,200,300,400,500,600,700,800,900%7COpen+Sans:300,400,600,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.893Z","timestamp":1789915884893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Raleway:100,300,400,700,600,900%7COpen%20Sans:100,200,300,400,500,600,700,800,900%7COpen+Sans:300,400,600,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 14:51:25 GMT\r\ndate: Sun, 20 Sep 2026 14:51:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45126,"size_decoded":2866,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5a72aeaed08c07ee528801ab3234323c","sha1":"9fb39202d32e3a45532038e61b8fc353b4e7499f","sha256":"d8714fdb1b0b243b6d7c9a870cee84b0593ba86817a6a9546063cf7a2e8218ef","sha512":"94380b9d013e3b9f4e6eda086f59bc38c6501a800b0816d5808409f9e6ac8ea9d3ae81328bf90c68249813bcbb47cbb79dc59925a39a1c57871cf3dcd073ca87","ssdeep":"384:0AYqY4tjXqY4pGqqY4xhhqY4tU8qY4FX7qY4aOdvqzn/MzwNYr/CRg3EyBaF:VosL5+2JbcI/Z2yr/J","tlshash":"93134fa004175850a7431dd623ce3e34ee0fa2657044d07a6bfd8baaeedad7623b431d","first_seen":"2025-12-30T04:15:40.639279Z","last_seen":"2026-09-20T14:52:21.577824Z","times_seen":8,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/footer-bg.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.346Z","timestamp":1789915885346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/footer-bg.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 35187\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35187,"size_decoded":35431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1370x590, components 3","md5":"02bfeda8638429b9abdfcb003cfcfa9b","sha1":"f1b565835e18910fdc2eb200301c52c6f1e9aa9a","sha256":"1613a30288cc82c45d091fc7c3998fe29ded580951796356569e229920f68dda","sha512":"aed7b5afdff5f4baf3a3f528317fda190ed3406116fca54c390c27dabc5c6d6803c199564d53e57627aff35a1baaba67f7c558e92909a48bf300e2afeaa94d37","ssdeep":"768:/8qhKYjtBfqjhDHAK4wXJv3PNI5RUwsk9iIenGG9zFYkFYLS1O:EYr0hzKwXJXN0iwsdIj8U","tlshash":"03f2e13be389d1e3d429a475218b47566f5a02fec389ff0bca01c60c685eb225d5e3b1","first_seen":"2024-08-19T16:06:08.601137Z","last_seen":"2026-09-20T14:52:21.578636Z","times_seen":17,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/jquery.touchSwipe.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.502Z","timestamp":1789915884502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/jquery.touchSwipe.min.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 11576\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11576,"size_decoded":11825,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11576), with no line terminators","md5":"91d00123eb72c7cacc3fbdd03d83762b","sha1":"6b0fcd06196374d8a8f742d5e1663433adbc3b6c","sha256":"f65f3aeed46b79940849fa2022f2cbdf368288de9046f2b3da075c42f9dde8f6","sha512":"34c2ef048bbf51ea56c4f6b4c61f3fc33eb5ad1b4bc31945e81e9ea8a61f80382009176936d78abcc4eed733c47e39af1b40089617efcbd5102a7fbfc9c037e6","ssdeep":"192:sWeHv/p4PUT2uN9MEzdA4KSuAAWF5apIOAJ7j0D0JXYiTlBzT4NYVBgVB7l7lNlk:HQp4PK2uN9GnAAWFcWOAWD0JXYiZBzTp","tlshash":"1f32958e7781b417eadc2274e24f4743253eac9b0a0a84b5e055fda4f9340b4817afcd","first_seen":"2023-03-07T12:04:52Z","last_seen":"2026-09-20T14:52:21.579411Z","times_seen":565,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home-2-back.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.337Z","timestamp":1789915885337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home-2-back.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/custom.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 30430\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30430,"size_decoded":30674,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x600, components 3","md5":"cd251ec3642ffc78f2bd9e03235d0be6","sha1":"9e9ffc6b7603714b2286bb961ff8eb41db5d5985","sha256":"907decdfa43671ed41f784c547f151ae83767e53b160ec5a003f4e92cc925cea","sha512":"289c0c391080699f841bcb2fcc3a79fbab00a81e5fe85f6b4a602977abdb52eff2aa316c1805be5e490ec9eaa2fb8070383684d39a7330467e388dd9b2730316","ssdeep":"768:jaGaD5G44444444444444444444444444444444444444444444444444444444P:FalG444444444444444444444444444M","tlshash":"13d2182fab111d67c6a703740143e3212f37f95099bb25ce371744226eaa3f0ef29661","first_seen":"2024-08-19T16:06:08.569657Z","last_seen":"2026-09-20T14:52:21.579965Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.392Z","timestamp":1789915885392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:23 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361202\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-20T16:56:31.531169Z","times_seen":66271,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.120.204.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:32.178Z","timestamp":1789915892178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://maxinvesta.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wlIfjRCh5Lehe3QUmhdbbg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 20 Sep 2026 14:51:32 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: RsAGAPzN07wOty8KGeZQyykXWnA=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":0,"dns":344,"connect":362,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/bootstrap.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.501Z","timestamp":1789915884501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 37051\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37051,"size_decoded":37300,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033), with CRLF line terminators","md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-20T14:52:21.581323Z","times_seen":6973,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":33,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/font-awesome.min.html","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.890Z","timestamp":1789915884890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/font-awesome.min.html HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6550\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6550,"size_decoded":6792,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (460)","md5":"8557e1b95039f9d7df4118b9e09d3085","sha1":"b86d88e75c66bba37e5fb919b1aaf794e529ae27","sha256":"8a0384a90d984392c99dcf5684587d3fa33ff46d7c777cd779a63e493cea80c7","sha512":"8eae7a440f25cb8258002e4e6494d110b35a328d7f27004e856e3776aef48fbca3827ba38fa0dc109754b71fefa5054bb2f15ecbb17bc6584793b005cb4b10ea","ssdeep":"96:1j9jwIjYjKxlDKmD1KUCDozoZG4FBeTG4FqHU24FCwqkKm/jotgm/5+yW63ms747:1j9jhjYjaKmxx0ZAdiVyjo+e+I3msMsa","tlshash":"e7d17462b1b502ba0063819236d4bf59a9e0c627c7ef55c4b3ddc2772fded45aa032a4","first_seen":"2026-09-20T14:50:21.242262Z","last_seen":"2026-09-20T14:52:21.58192Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:28.674Z","timestamp":1789915888674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:31 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa903df-891\"\r\nexpires: Tue, 15 Sep 2026 08:45:00 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k0q6Xpx3EMjXoT4rpx6BFg8pf2Dbohefa6IJm7kdRUGAa2m/Y6ykVU0fXm7JHH3n2ZpVE2g\r\nx-77-nzt-ray: fdb541231231cb2118f3af6af47cf439\r\nage: 454291\r\nx-77-cache: HIT\r\nx-77-age: 207\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"d3bf99e1aae5fe61840075977c32fc08","sha1":"92e9f68592ad767e421e2d9d0fc2dc090fdbfc7d","sha256":"a46e74c0e02a932725399c083e9c080d89a74355efdc44c0e689384355c3220d","sha512":"7a0d22bc90615e11450cfa9de74c58942a1a0872f1e94cb70fae4aaa556c4bc85bf088a5f4072fc81550de014285423822523f5aeb8c5f1079dcd480817ce904","ssdeep":"","tlshash":"7b415783c4b80d431b8c262bb89655415d50c3c7ec893d4e766e9a7f2f4cea910e677d","first_seen":"2026-09-15T08:49:00.586011Z","last_seen":"2026-09-20T16:58:53.359032Z","times_seen":163,"resource_available":true,"data":null}},"time_used":3302,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/effect_style.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.486Z","timestamp":1789915884486,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/effect_style.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 27220\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27220,"size_decoded":27463,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fb13066180f5f277fcecec0aec78ef98","sha1":"cc195ada320b8ec62d7bb19efdcd62f7283f99ff","sha256":"7fa884780fe9adcc7524ba54004ac2e0bb45ea11e814145c659f6adf1a49c21a","sha512":"ff532c919dc92e30d22f94569eccebaaa3214b0942d1fab8231099e40a8f3a92af4e48e5f7e164e4b1887b8c1c99b8165f601214c5b0ce0ffa81abc1c5b2f210","ssdeep":"768:WhwGcal7e9cPkLCUBVoXBYyNyaVFFNXwh:il7efj","tlshash":"9bc2661cb3551548a7a74f18a3f95b24fe2ca0b2da0b15fd77f7aa19c7e20841113a8f","first_seen":"2025-12-30T04:15:40.664542Z","last_seen":"2026-09-20T14:52:21.583236Z","times_seen":5,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":33,"receive":23,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.246Z","timestamp":1789915885246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.420Z","timestamp":1789915885420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 20 Sep 2026 14:51:25 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHA%2FTsEytRXoJKPUj4eORylde5O8edCrS1kIJNUdkcfoEhTvddi%2BPtM5JyMyzG%2FFjhB1Uz8zp2TjYpA1fmwRo8HYC4Lzu%2FHneapzS7ung1Tush63Lpphhc7q%2Fh2e%2F4xCdZQveW0%3D\"}]}\r\ncf-ray: a3e1a5ec1a0756c4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":238,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.717Z","timestamp":1789915885717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Sun, 20 Sep 2026 17:03:50 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 2855\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KS2sGJnlDqmLIFTLcWgsgkdURx5elLYQFwyEdk9vTvp7mMUgTWfcUsRLM64XqW%2BjHGQThvZ4FGX6ueX%2BL3l0PBf6PUtBOR7tSwtDeRyCJYFC365W0%2FTrtGDeYsaq1FpNaymd9YY%3D\"}]}\r\ncf-ray: a3e1a5edbc0a56c4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":129341,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-20T14:52:21.584601Z","times_seen":3143,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/favicon.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.977Z","timestamp":1789915885977,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21935\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21935,"size_decoded":22178,"mime_type":"image/png","magic":"PNG image data, 503 x 322, 8-bit/color RGBA, interlaced","md5":"afd8dfb3c6dec27646c00f355e3c9c72","sha1":"d92a43736b852da094a3c40fddbecf771857084b","sha256":"754bf0e0fe3a685100a95cc65e912bcb80d9997d87bb9714e787665538758ec9","sha512":"926ccaceeb76f3e692e0484c73faa3b0cdabb9ee2b5642d06e15d477c059be74a0bfb363272f2e838e0d5206c9fadaa4bafc2016be4908077fcfcab5893ea3fb","ssdeep":"384:5ygHTpu0JNuWjHwRej64eYSZRdJWi5iJG3Xt4V58yw/z2+Un:5/X2Woejo9Wi5iJG3Xto55K/Un","tlshash":"7fa2e001d951163225770fdfab29a4a78ed9f420533548eebee95001ed60b14e9ceceb","first_seen":"2026-09-20T14:50:21.293289Z","last_seen":"2026-09-20T14:52:21.58523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home5-labour-img.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.344Z","timestamp":1789915885344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home5-labour-img.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 23355\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23355,"size_decoded":23599,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 473x235, components 3","md5":"0f1b4814bd81209ff78cebbb0f199aff","sha1":"337c5247b609aa27e8ea6e62f7a831dffc54fa31","sha256":"53143e81ea9f2b3d8e1f9c65562c1fb4d11b686fa90759c4fb53cdfe69f88a0d","sha512":"31763df7fbde795d0b703c3a84f707d438a660579a2e2030176251df1deed6b93c97f6ba5b2acbb14ae148288fd09a6bc3b42e744e2ca22f9236b12426d7eda5","ssdeep":"384:plMNK+UL5R4xSCU3oVh12/YQsfCr+iFHMfndKqGFTmNOKsG+WIS/hQQyfsao8:pMUTGhg/NLMvBG8NOG+W4Q+z7","tlshash":"1da2d08936a91e43ddf60834ca28d7e1e3a7731d65db816f0e75b0663f252139994381","first_seen":"2024-08-19T16:06:08.580518Z","last_seen":"2026-09-20T14:52:21.586002Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.400Z","timestamp":1789915885400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361203\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-20T16:43:11.420396Z","times_seen":343814,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.498Z","timestamp":1789915884498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/team-icon.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.516Z","timestamp":1789915884516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/team-icon.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1269\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1269,"size_decoded":1511,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"86334ddf05ae3fb7306d46c32e9d23eb","sha1":"6537406797a0365a3f4aa32c6d49d2f6026508b3","sha256":"d3dcfbcb11557c822a6b51201a0abe694c7df94f063f96e6ea29c08c1687af90","sha512":"dd392ea0e8ab56029b027f8367c4aee0bc0f698334e59210f5788527e8f7832aa02a6aa6f1e01ad6fe0c033776bfafe32019e0ea8462f402f0c6ba6bd706ae8f","ssdeep":"","tlshash":"77216367d53f846ce1c462b90eb070246d37516d023b6f25b5e996310bc2191e1dc8b5","first_seen":"2024-08-19T16:06:08.551163Z","last_seen":"2026-09-20T14:52:21.587299Z","times_seen":12,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/technology-icon1.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.523Z","timestamp":1789915884523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/technology-icon1.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1243\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1243,"size_decoded":1485,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"172e2d67989a87b44b1e2d80134f2542","sha1":"8ceed22d72e4d5117c5d3ed3fb92bcc18e6a2a44","sha256":"cc4f6a5fd067151101d43fcbf926387e20fd40fbb3e87cd4ce8d07c737ee2468","sha512":"bc169f93a8ad0a1be1d81cb3af043362e3eeb5be387de507e9dac9e4d8c0547b14a0d03a3f7e8bfe8e19a7fb8ba4a2f8f2a1c1fbdf8cbf9cb136c47763f347a2","ssdeep":"","tlshash":"722129a379b41b11cc3bc41d4ba10c0979a8ddf09841104badd9ffdb92322ec4ce1183","first_seen":"2024-08-19T16:06:08.55605Z","last_seen":"2026-09-20T14:52:21.588034Z","times_seen":13,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:300,400,500,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.895Z","timestamp":1789915884895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Montserrat:300,400,500,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 14:51:24 GMT\r\ndate: Sun, 20 Sep 2026 14:51:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7268,"size_decoded":1327,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4e631d80790c715be1f0e8a5546ae992","sha1":"76a95b3a582f9c19772b5b0c633021efa38aaa64","sha256":"3646dc8078d6089da9be65f08001188d079ea2dcb3a188cfe836eadd1d2ad849","sha512":"8e9bf5b9a3f181fe514e470b75a7251bee7b7bfb00bc9d173d602918f678ee12399b8f59e7f8fe814f4c54c6d41af37071019fad5ac43b52c9c806552d0153b2","ssdeep":"192:XRH7YQONu1Ra7h5OsuyR97uGOXu7R47nfOeu8:Bb/SjpbAp","tlshash":"07e18e51101ae500a7432cc923cf7e25cd4e61667494c5767bfe2ca8ade6c365361b3d","first_seen":"2025-09-07T16:00:12.231207Z","last_seen":"2026-09-20T14:52:21.588776Z","times_seen":185,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/s.widgetwhats.com/wwwa.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.230Z","timestamp":1789915885230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /s.widgetwhats.com/wwwa.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/animate.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.491Z","timestamp":1789915884491,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 69288\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69288,"size_decoded":69531,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"dc707eaa83e2e39fa88dd48eaef5277b","sha1":"53469c586205a8462e1c56d277a1eeabc9691345","sha256":"4cac2f3d7bf8571ea5e8beb7916dc5517bf6ab29de5fa418d7ff376a8ef8e6dc","sha512":"75c40d943a38a3c26703938167d1c94423ed0a410873eaba41ab393aebd07b4de07d5f91bd53c94ff3ce87e062dccb79930438daef1894477ab652ef09b291f1","ssdeep":"768:tNpNfR8J81NGNLf1f6AGoqb+8u89NwNy8e8W:d8J86f1fib+8u878e8W","tlshash":"76633cee194061c407524f75d3eecf65aa2ca1721c251dee72521c8f8f8af9c978ba07","first_seen":"2024-08-19T16:23:51.918144Z","last_seen":"2026-09-20T14:52:21.589356Z","times_seen":15,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":31,"receive":46,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/testi-back-2.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.338Z","timestamp":1789915885338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/testi-back-2.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 221788\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":221788,"size_decoded":222033,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1440x760, components 3","md5":"cdefba6c4aad166d2e7acdfa9a52d416","sha1":"d11a60dca1020e69aed69713695e2642929e19c4","sha256":"4b52ef045b87781bf203e302e3cb47b406ed0803b8258239150943b6a8fe5ffd","sha512":"2e2d2d47f35dd95d921eff6f33c8f0045f95503c8ef01456b926bcedaafc1824fb8517506876052a52295c04ec19685adf96baa2a80bc5f628c7ec33485c293c","ssdeep":"6144:pcYyN5sT2igwI0qNraz0wRK4RFgSaoQ/KU3c5aHRY+c0e+:aJir1xgSao9UMmwD+","tlshash":"9124120f6647f880c9910038e3afbaba21650dd7deabb55f25e9ec5670d233c5e6b014","first_seen":"2024-08-19T16:06:08.592317Z","last_seen":"2026-09-20T14:52:21.590058Z","times_seen":9,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/choose-arrow.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.342Z","timestamp":1789915885342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/choose-arrow.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 180\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":180,"size_decoded":421,"mime_type":"image/png","magic":"PNG image data, 10 x 9, 4-bit colormap, non-interlaced","md5":"823d481f215c657d7ef669d8964dd945","sha1":"4856a48205635fa34a4c621c81ab4f144de84dfa","sha256":"d89a639b4c1cc6461396b572260bc0419da3512ee470cf30f6fb3a804cbd295b","sha512":"4e067f4327338a2ee28cf15f44cb41464e04134c4b8b31ea1f3a212a5ee7a6b30f9d9623c21285df0beca90fc5ab1cc806880f2d26548cf74cd15fcaec1db21a","ssdeep":"","tlshash":"eec02befd1307c784a6e2e5f83a524c1ce13419d1319cc027084d8bcf993258c4e05c3","first_seen":"2024-08-19T16:06:08.604675Z","last_seen":"2026-09-20T14:52:21.590687Z","times_seen":12,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.395Z","timestamp":1789915885395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160839\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-20T16:46:19.067483Z","times_seen":562260,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/header-3-sticky-logo.html","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.514Z","timestamp":1789915884514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/header-3-sticky-logo.html HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":256,"mime_type":"text/html","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-09-20T15:12:59.701848Z","times_seen":13140,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/standard-labor-icon.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.522Z","timestamp":1789915884522,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/standard-labor-icon.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1033\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1033,"size_decoded":1275,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"99b7e058958323ac34fdba6a45fa04d1","sha1":"342d768cff160879c6c31e26e278f313799a9191","sha256":"e52a42a0bf0e13d23daf52d9be593df9ad46dfee2c55f73c6f6d4facde5f38a5","sha512":"39a3345db7617c3f0aa945211d6691757bdcdf71c954ef2ee5cca8470206f7e948fa3d9f0932cdb87bbc9cd2472aec344447c902b00892783fc517269dbdcc3f","ssdeep":"","tlshash":"1f1184f382981d54ed0e52769488040f7f65675cf136e18b45dce07ddd09286aba11e8","first_seen":"2024-08-19T16:06:08.555449Z","last_seen":"2026-09-20T14:52:21.59278Z","times_seen":13,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/www.googletagmanager.com/gtm544554455445.html?id=GTM-M28KPW8","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.227Z","timestamp":1789915885227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /www.googletagmanager.com/gtm544554455445.html?id=GTM-M28KPW8 HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":556,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-09-20T15:23:56.128284Z","times_seen":147063,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.250Z","timestamp":1789915885250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:23 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361202\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-20T16:56:31.531169Z","times_seen":66271,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":5,"connect":34,"send":0,"wait":19,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/comming-soon.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.504Z","timestamp":1789915884504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/comming-soon.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1695\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1695,"size_decoded":1943,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4cdae76ee12c969558dd9845f6f0082c","sha1":"27b3559f1d72f11ce17f891e8884a9ac7e19a6c7","sha256":"a4045c14965535336953ec61eefbbfbe859967aefae4a46de6f48573311d0084","sha512":"28f51e4ce6a02c70fde0215be01df536a250e091fd1f86f5e609b9523d511c01ee76c25fd0c2b0cb30394002ccc810489e7f4c33a0c890a2dc78dbc4cff47d1e","ssdeep":"","tlshash":"2231d26885b208a0b87d67e7df7d0280d658a2331547c349b46ce4802ff4901ea4effc","first_seen":"2024-08-19T16:06:08.617069Z","last_seen":"2026-09-20T14:52:21.594175Z","times_seen":12,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.334Z","timestamp":1789915885334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/contact-help-cal.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.341Z","timestamp":1789915885341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/contact-help-cal.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2902\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2902,"size_decoded":3144,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"7361d2c4ac8bfa4e0f4dd05b5716695a","sha1":"8ffd5c8dcad0223dc29a75ad7e97b643a8e02a0d","sha256":"8234b67f145436d57016859a64f38eb1fcc48beaf6ca4952393a578f57b0f1e9","sha512":"77f54b8eab4e0683ddb7788de24ed9bd87f9c9a1ec310b81744c685948c6617fb062b0f7bcef6d819465fe24254735ea7189d535a49202ec88c6229661663520","ssdeep":"","tlshash":"3c514ded146fcfafd4610606aa57f07968373c87b70928f9825659d29342b07c748175","first_seen":"2024-08-19T16:06:08.577786Z","last_seen":"2026-09-20T14:52:21.59471Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.397Z","timestamp":1789915885397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:23 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361202\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-20T16:56:31.531169Z","times_seen":66271,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.495Z","timestamp":1789915884495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /translate.google.com/translate_a/element7876.js?cb=googleTranslateElementInit2 HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/responsive_bootstrap_carousel.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.503Z","timestamp":1789915884503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/responsive_bootstrap_carousel.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2410\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2410,"size_decoded":2658,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2ff31921cd87f79c608ab17ee10b9edc","sha1":"3735e923e8517c5cb88f4b9fe1980e9eb724075b","sha256":"fdba2d4e3eadb97a843ee534c06ea74bec13ca2e1832fed8e90d46a771e593b6","sha512":"a9f2890691f0d27a43f8508d7eac4c48060c6d6b980616259b3a4c0ba92991dcf620a5bf1451ed1434e3c9380a532327a87bd33dd3b48120893fd4ac955297de","ssdeep":"","tlshash":"ff41af95e99c1a78643f3a776e6b2818f32114534f1646217a6fb15c0f31c0553b6ff8","first_seen":"2023-03-08T09:53:31Z","last_seen":"2026-09-20T14:52:21.59544Z","times_seen":18,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.386Z","timestamp":1789915885386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361203\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-20T16:43:11.420396Z","times_seen":343814,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.389Z","timestamp":1789915885389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361203\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-20T16:43:11.420396Z","times_seen":343814,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.393Z","timestamp":1789915885393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160839\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-20T16:46:19.067483Z","times_seen":562260,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T14:51:23.953Z","timestamp":1789915883953,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.4.33\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0\nPHPSESSID=6373dce533b3138c4302fa86953dcd36; path=/; domain=maxinvesta.com; HttpOnly\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0"},{"name":"PHPSESSID","value":"6373dce533b3138c4302fa86953dcd36","quoted":false,"path":"/","domain":"maxinvesta.com","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=6373dce533b3138c4302fa86953dcd36; path=/; domain=maxinvesta.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WidgetWhats","description":"WidgetWhats is a fully customizable chat widget with appearance, text, color, button style and position.","website":"https://widgetwhats.com","common_platform_enumeration":"","icon":"WidgetWhats.png","categories":["Live chat"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":51611,"size_decoded":52107,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1097)","md5":"7405df863678e0aef36808fe78f1a34f","sha1":"93265751e90cad1107b9175fc39527a53cd09599","sha256":"163cd57d4d840f6e01a85a342a4281c535c1a3ea1267225540a553a72552d799","sha512":"df62367c3b8644aae525fa7c1cff9d0daaae37f826978dcecf5469c5e7332b34d0dc68277e24cfa7f4869c95f597fbdb7b7c4f8cc22a3a0dabc82334bb5f9aab","ssdeep":"384:5fkhUyufqOBhrgDtdBwWvoFdJYSA14Xxmq5n+iUXTRJI6vHvhHvj:5qUyVOBhrucFdJYSA14Xx1R+PLH5HL","tlshash":"b9339321a8f1243301a780d65a727f2a7ff48163c22616447bfc8bed5fe3e55d923a49","first_seen":"2026-09-20T14:50:21.26564Z","last_seen":"2026-09-20T14:52:21.596196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":4,"connect":24,"send":0,"wait":250,"receive":54,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/calc.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.507Z","timestamp":1789915884507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/calc.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5829\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5829,"size_decoded":6077,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (312), with CRLF line terminators","md5":"4189710dce34d8cd049f8078f1af8425","sha1":"dac55782b7a1219e36ea0b50da60ec047680579c","sha256":"e28f1d614ee83db197c161df2de42311ae5b446f6fa0bc4eba8cef5b5e8957e1","sha512":"e609ccc721adea868ecd80eef4db5670b2b6e336f7eceb32329e4200f64b632294d147a99ac91e1f56ac565d7bd4d281bc19fc5a37c7b8f1ac537545a8d120fc","ssdeep":"96:Y3yd2+wfrpmft+wfKmmRXaa+F1FzFjFsQ018Ae:Cyd2+wfdUFfKmmRXawD1Ze","tlshash":"51c1e1e624ae1a5550f17317fbf91205ea3c3a334091a9c2fcde58e66ff1080c655dae","first_seen":"2024-08-19T16:06:08.613701Z","last_seen":"2026-09-20T14:52:21.597124Z","times_seen":9,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/client.crisp.chat/l.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.229Z","timestamp":1789915885229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /client.crisp.chat/l.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/home3-images/home3-slide1.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.336Z","timestamp":1789915885336,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/home3-images/home3-slide1.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 203715\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":203715,"size_decoded":203960,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=900, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x900, components 3","md5":"2da0c721a9d0d48aa51b426c7616bd05","sha1":"eeef171df0d509ba17f841e848ae14f421a86310","sha256":"3ccc02a30501bc56204517388ee3c51451f517979e272d87871f6be09e1f3ede","sha512":"704dfd7945c8d9f141e5c228bbfcc05ebc2224ce77993c708b1a8f4327898bee19e0448aba51579b17141641af715a9d29cc9822743b41be249782f7b405d464","ssdeep":"6144:s7K2R4rNFUo08xl1IeFEmrOcksK8o0ILW:s7PR4s8xfIQr/jIS","tlshash":"85141268a315cd42f0f516b04062e771b341df1de3dbaab9ba4e6c137b70f222969251","first_seen":"2023-09-16T20:17:20Z","last_seen":"2026-09-20T14:52:21.59788Z","times_seen":36,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.399Z","timestamp":1789915885399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361203\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-20T16:43:11.420396Z","times_seen":343814,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/33c14a40ad537fa79b26de2554915d9a06ba0477.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.186.192.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:28.568Z","timestamp":1789915888568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/33c14a40ad537fa79b26de2554915d9a06ba0477.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-09-20T16:58:53.403088Z","times_seen":2757,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":9,"connect":22,"send":0,"wait":26,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:32.118Z","timestamp":1789915892118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://maxinvesta.com/\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k0CBosYop8XOcBqLjIk52fKXtUI2bCeWdQCZCxUBuxjNjKIHGHQWGOfQxlUKPWJk8tpNDng\r\nx-77-nzt-ray: fdb54123040e649c19f3af6ad7c30009\r\nage: 395\r\nx-77-cache: HIT\r\nx-77-age: 395\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-20T16:58:53.38723Z","times_seen":1651,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":6,"connect":8,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/s.widgetwhats.com/wwwa.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.493Z","timestamp":1789915884493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /s.widgetwhats.com/wwwa.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-20T16:58:10.532079Z","times_seen":62976,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/header3-logo.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.513Z","timestamp":1789915884513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/header3-logo.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 136210\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":136210,"size_decoded":136454,"mime_type":"image/png","magic":"PNG image data, 2162 x 580, 8-bit/color RGBA, interlaced","md5":"45ad27cfc197d3e21689a4f28213e02f","sha1":"4ab4de32bfa7e9e3532c7cd354082fe0db661d3d","sha256":"eea6208825c3dabd1a7e4058484384da1264a70af997e20c21b1c76eca2724fe","sha512":"79934491cf90d7dd0443835a87d0aaa3856816e7acdb51c55edf31ce8256c12cc503ada3dad5662ff4c8fa7d048385992bb2e07652647cd21962fca95a53f169","ssdeep":"3072:VNntgaRQK3iTj/nJAGz9I1gs5BsbsKLVXNtYeWjxdTU2xHO:V3gaR/ozn2GBygs5qbrtYeWjzxHO","tlshash":"18d312a889d2fe78cc969f7998158f079e30b57d1698063ea2fa51837077d091bc0f47","first_seen":"2026-09-20T14:50:21.276765Z","last_seen":"2026-09-20T14:52:21.599747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":31,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/delivery-time-icon.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.517Z","timestamp":1789915884517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/delivery-time-icon.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1563\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1563,"size_decoded":1805,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"05dd05ce0115f22977367484391b04a9","sha1":"d79b05f3e84c824ac84843eb4d32cca05869c1ee","sha256":"360302f7f1ec476512987ba2bec7f5f03fb1f37b47e6b2266fe0915f6ce5bb1b","sha512":"c628d11714f8f10f3e46cf977d011d2f8d14954ca21991db386d18e8383c4a2d375d33d13ec2a501e61ab36f533c3f15f8afeb5112b433c3d6041ad68330a866","ssdeep":"","tlshash":"dd3108c0f38d9d28d8251233070ddee61c8fd05c0dd2e86294ef96411bfe0da85b8252","first_seen":"2024-08-19T16:06:08.551785Z","last_seen":"2026-09-20T14:52:21.600532Z","times_seen":12,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/delivery-icon1.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.520Z","timestamp":1789915884520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/delivery-icon1.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1177\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1177,"size_decoded":1419,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"69754297d4a5950fe0448b98c6b11366","sha1":"7cb53571c053820081e53b5b2a1e4f32b2ad961a","sha256":"c7a9ff5b0ba738c9e83df3a204e41b1c93daef1467ed12035fd04d05867a22ff","sha512":"456f007482d33bd2406f43f55c7f7c56b4b7050dad8d4e96a605680632f35d23c48ff4f440993b01ec05c04c45a6d87d00e68b8d492031c43046b4170ca8f450","ssdeep":"","tlshash":"6b219c855239ccadef43103fc1617512e9a25d7b7dc1982777575d3b6121f13448c542","first_seen":"2024-08-19T16:06:08.554876Z","last_seen":"2026-09-20T14:52:21.601328Z","times_seen":13,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:32.009Z","timestamp":1789915892009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:32 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k98v0U38zvJu4LdeCNcnJUbPG5qEJoQoBdc4Lda0Pf2syZzxk/CA0p40GX7PO8X955bgBmU\r\nx-77-nzt-ray: fdb541231231cb2119f3af6a7785cf00\r\nage: 454273\r\nx-77-cache: HIT\r\nx-77-age: 454273\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8226,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-20T16:58:53.354543Z","times_seen":163,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/style.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.483Z","timestamp":1789915884483,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 108984\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":108984,"size_decoded":109228,"mime_type":"text/css","magic":"ASCII text, with very long lines (389), with CRLF line terminators","md5":"d8af9eb1f493df4f117767d0c19dd073","sha1":"105bc68d4d92bb6bf255774678d78968d7a88c7f","sha256":"30330153765752b9fb7392837448b7e6faaa7f9c5cb40fcbbf114354caa9e1d5","sha512":"4dcd59ec52414558ba394286b111342430519716dc149e46cc1b4e285b5d4124e5fe2f2e1e88b23c4e7e0a0aaa21d2b9987e5419a0b214c6afeb96a6bed0f9ae","ssdeep":"768:eW6f20W9FPFgcaC4VThVK1xtkh+iVIMqH5RSl:t6f2L3N1a9VTC1xtk8eI9bu","tlshash":"60b33098ee432046b237da79ebb21354fa1850638f0641787be4a2458fb457d863efcd","first_seen":"2025-12-30T04:15:40.62127Z","last_seen":"2026-09-20T14:52:21.602604Z","times_seen":4,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":31,"receive":69,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/js/theme.js","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.506Z","timestamp":1789915884506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /js/theme.js HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8944\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8944,"size_decoded":9192,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c926ab736922292dad4d319e436814b6","sha1":"9b6bcbf1760b5ce88ba604086ed9fb33868a5a7d","sha256":"86b9f6a2ef3d76235e29997e09e58e36504e01324b6c307d7f27be3f00a1bd7d","sha512":"ca360859184e507265f1a445c925722ad7b8781ffe9af03cadeae9bb38823819c3e20755b6bb06f2dab6072319eb68a92cf91ca29807504d04064cafcd4b88bb","ssdeep":"192:zOCT1VYfrWZQ7Jx7j13T2cZ8c9zEEkPJea:yeYyW7Ec+c9zJkPb","tlshash":"9b025459f05220b658b3337da7bac204fe7a052f500696163eff42e42f779292256f9c","first_seen":"2024-08-19T16:06:08.606041Z","last_seen":"2026-09-20T14:52:21.603343Z","times_seen":13,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/quality-icon.png","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.518Z","timestamp":1789915884518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/quality-icon.png HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1040\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":1282,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"1a45fecacbdf7b84ae7ad58b37bcf915","sha1":"d6eca74cabde9846172c1640467cd46d1f0236fa","sha256":"8d5890560b3b0ebf23e9335ea9e869b732e1f43aac7cb5a5e7006496af0c7f74","sha512":"63671da84a216b655ca8ad72f1a8e9d4d7b88e3c7a5c0e1a4bf4e659230f0ee5d8e578404caac4284eb6227e542c69faec2f2493ee7642a0e80f5ef1d82bf267","ssdeep":"","tlshash":"491184920d70bc7decab343aaad40441c40b9a288b02762f50e9ad30c58833e6bca029","first_seen":"2024-08-19T16:06:08.552511Z","last_seen":"2026-09-20T14:52:21.604133Z","times_seen":12,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/header-3-sticky-logo.html","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.244Z","timestamp":1789915885244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/header-3-sticky-logo.html HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16,"size_decoded":256,"mime_type":"text/html","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-09-20T15:12:59.701848Z","times_seen":13140,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:32.007Z","timestamp":1789915892007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DKOWJlLK.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 14:51:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-4e9d1\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k1PR5ka1e/TdSYB+YTIbOOEqA+Eu05nabjLOPwyVD7CkBcTLkFJlrAhTKx4PEeMpKr19sv0\r\nx-77-nzt-ray: fdb541231231cb2119f3af6a5eedb500\r\nage: 454273\r\nx-77-cache: HIT\r\nx-77-age: 454273\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107702,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T16:58:53.38587Z","times_seen":166,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/css/bootstrap.min.css","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:24.481Z","timestamp":1789915884481,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:24 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 121263\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":121263,"size_decoded":121506,"mime_type":"text/css","magic":"ASCII text, with very long lines (47771), with CRLF line terminators","md5":"68666612a40066cef81d293794d4888a","sha1":"405991e28e1045703eb13258386c91349774bdab","sha256":"87979a1fba7dbf35c2da212738870459fe872923084be6959fd44c7adf9e70c2","sha512":"15fc23f27e046834470c0b3c43826fc36d6a5c0f28ac810578a1609f20d5b2cfba1330bba03fe99ce1b036efd5486244ba59b5471298304666c25f2dc60db156","ssdeep":"768:XyXGxw/IcJTCNrDnEOIuMHnw5mzI4X8OAVuFKNR28tc2Bvg68gQPRecQVvH1Fx:5w/vcBIuMHnw5mN8lrN5BgrPlU","tlshash":"0ac3c7a0f21031ea7333c55a75d0fd872219a153e6664eb7f22f25d88f846ca1673f1a","first_seen":"2025-12-30T04:15:40.638305Z","last_seen":"2026-09-20T14:52:21.605768Z","times_seen":4,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxinvesta.com/images/contact-help-bg.jpg","fqdn":"maxinvesta.com","domain":"maxinvesta.com","tld":"com"},"ip":{"addr":"173.249.3.135","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.339Z","timestamp":1789915885339,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maxinvesta.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 16:02:19 GMT","end":"Tue, 15 Dec 2026 16:02:18 GMT"},"fingerprint":{"sha1":"36:BB:99:D7:96:B9:18:77:78:BE:79:F0:FC:31:53:6B:B6:26:2E:3F","sha256":"68:35:54:26:96:BA:01:EF:24:F5:0B:3C:D5:09:EE:73:D4:86:1E:22:E5:24:E0:DF:60:25:34:30:9F:6C:E9:F3"}}},"request":{"raw":"GET /images/contact-help-bg.jpg HTTP/1.1\r\nHost: maxinvesta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://maxinvesta.com/css/style.css\r\nCookie: PHPSESSID=6373dce533b3138c4302fa86953dcd36\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 14:51:25 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 28 Apr 2026 00:16:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 18304\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18304,"size_decoded":18548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 321x212, components 3","md5":"1524cac4f41f5cac8ac207f5bfdd27f9","sha1":"ac19e734cefe9e3fed2f2ae2f312dca04d87d1e1","sha256":"08a2e11a8c0255d35a2a307d569cde6eba6ddba72746e9f871a2351b0bd1b497","sha512":"968dd5a18a7b5487e40591a0865895841d00935d98f2175184bb84ab983230da0890ac4e70a8892d20b2593e947b21eadbcacdc9fd39757a164ad32ba2ada4b2","ssdeep":"384:RG5UiKtVCDQe0pLAWtZ5XlhvSbdZWVsDANXWVu/ABWV8z/PUjmUI:kSjtVkLaLx5rcdZlDANXWyALMI","tlshash":"ad82d091cbb75a65cd370638c00a913a1d1cfdddd1905836b3d461df568baa0bcbe62c","first_seen":"2024-08-19T16:06:08.577096Z","last_seen":"2026-09-20T14:52:21.606588Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"maxinvesta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://maxinvesta.com/","date":"2026-09-20T14:51:25.388Z","timestamp":1789915885388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://maxinvesta.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:22 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361203\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-20T16:43:11.420396Z","times_seen":343814,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}