{"report_id":"5de1153c-323f-4b66-a012-4801d24ab9cb","version":6,"status":"done","tags":[],"date":"2026-05-26T16:34:24Z","url":{"schema":"http","addr":"aiinvest.net","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"172.67.176.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aiinvest.net/#/","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"title":"Aiinvest: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aiinvest.net","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"172.67.176.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-30T16:34:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":10,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54340,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.674638+0000\",\"flow_id\":2209235806860760,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54340,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":910,\"bytes_toclient\":3148,\"start\":\"2026-05-26T16:34:06.144856+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54368,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.693197+0000\",\"flow_id\":755827463829279,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54368,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-05-26T16:34:06.145183+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54352,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.703569+0000\",\"flow_id\":1716006057555642,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54352,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":910,\"bytes_toclient\":1634,\"start\":\"2026-05-26T16:34:06.145082+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.916025+0000\",\"flow_id\":2077887117003890,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54400,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-05-26T16:34:06.396402+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54386,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.964748+0000\",\"flow_id\":633377946209269,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54386,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-05-26T16:34:06.396277+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:06Z","timestamp":1779813246,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54380,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:06.969010+0000\",\"flow_id\":1050324781370203,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54380,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":910,\"bytes_toclient\":1634,\"start\":\"2026-05-26T16:34:06.396123+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:07Z","timestamp":1779813247,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54414,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:07.463385+0000\",\"flow_id\":382783784373075,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54414,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-05-26T16:34:06.936787+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:07Z","timestamp":1779813247,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54426,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:07.493521+0000\",\"flow_id\":1413889468033205,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":54426,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":910,\"bytes_toclient\":3148,\"start\":\"2026-05-26T16:34:06.944309+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:07Z","timestamp":1779813247,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44786,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:07.742562+0000\",\"flow_id\":878620578929391,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":44786,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":6037,\"start\":\"2026-05-26T16:34:07.187119+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-26T16:34:07Z","timestamp":1779813247,"ip_dst":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":44790,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-05-26T16:34:07.769090+0000\",\"flow_id\":1429961235757919,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":44790,\"dest_ip\":\"47.79.64.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"java-vue-bucket.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-05-26T16:34:07.195423+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aiinvest.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-12-28","domain_rank":0,"first_seen":"2026-03-14T09:22:15.411518Z","last_seen":"2026-03-14T09:22:15.411518Z","alert_count":166,"request_count":83,"received_data":10846757,"sent_data":33741,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.like1688fire.cc","ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-11","domain_rank":0,"first_seen":"2026-03-14T09:23:10.31593Z","last_seen":"2026-03-14T09:23:10.31593Z","alert_count":0,"request_count":13,"received_data":511104,"sent_data":6770,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-05-11T12:41:48.955078Z","alert_count":0,"request_count":11,"received_data":762592,"sent_data":5018,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"vip-cservice.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T20:16:59.760558Z","last_seen":"2026-05-11T19:55:45.135858Z","alert_count":0,"request_count":3,"received_data":67617,"sent_data":1249,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aiinvest.net/js/Footer-CSQdyYmS.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"51fa88c3e867593047b1c004cdf0d195","sha1":"714d1411b045e092614e00ac6a03c1b54915dbd5","sha256":"fae29bdc65827b197fae376e3684e6c0a5d5d1559dffeed431e1f46397b81fdc","sha512":"0643e89c71d432e605635820a9a3b70b8a110088ca400b8ab520d54b65decf1cb5238ddada3868a6335ebfce0be8dc3761f8a7738a85cab733f478d06a40a573","ssdeep":"192:v3vNB8mwBi5GVBmTI2rDtA5/d3WIJ14RqCjuu0IUGjUTaqKjSTvS1wSjE8LGTM6L:Pvv8PBRPmTVDt6/d3WG14RqCjt0IUGjs","tlshash":"6c321a047977c9f9c6b784b5b8415510f238bfeee56bc85ab3fd890a17ced390a06260","size":11427,"data":"","first_seen":"2026-05-26T16:34:37.700108Z","last_seen":"2026-05-26T16:34:37.700108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-BWczMgE9.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee8bca78d8bc39fb6e8f2ce2f4d02e78","sha1":"a3643f5ddc87bb1a5ebd7e84ca771d328789aede","sha256":"e2fb86d55c4ad48498f7915e21de0f9e58d67029c5aa7b2f41d77e439f464418","sha512":"50dd5cf252bc2efd597e015813f0d9167eaeae21ede58cbd29f203de5463082e633f324afc53cca6b20d7a4b430ebd98ced0ca746029ffa6ff9f668a0c3c825d","ssdeep":"1536:e9R8Wx5TRoshtG80ZgNaeYXE+bUmN8SoFfefW8UjXGqW/lWBlxvH1hfGJnesv8ni:wRt5jTG8ralELZFOUnusSQilqw7ShHTU","tlshash":"d7048e4db221757a86f3568a42948110a6644f49f458c4fcb6bdbc272deec5802feff8","size":173125,"data":"","first_seen":"2026-05-26T16:34:37.711257Z","last_seen":"2026-05-26T16:34:37.711257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/PdfViewer-DOyFPzLI.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e6a21ccd794491a91eae69b74fe093f1","sha1":"aabba268421f2bbc1e8f594e04fb2d99fc01a4e7","sha256":"6a217778bcd72762498693f9734cd13e0ae3f01a2ae8c5d605c017eb2f2a9d65","sha512":"7324b9806abdea2aa8ba26eaa4ec2b2007a0cdd38c936b45bee6db13248289d778f2554da23b79f4ddaf3ba8906acebc0c3ff4e53ff7abd40cf8b96b25dd783e","ssdeep":"24576:YkpMfCJkPXXq8RqbOt7aFMz3FuEoYlOsp8yDpm0gLsC7Xl5:YkpMfCKPXXq8QCFR+l5","tlshash":"cea5a072634372e96b79468671b91609437f154d34f3a1c8ed8e2edac52ad2b237c23c","size":2202810,"data":"","first_seen":"2026-05-26T16:34:37.75824Z","last_seen":"2026-05-26T16:34:37.75824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1779813247735","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","size":17618,"data":"","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-08-12T02:21:43.742234Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/login-bg-CtTnvaIr.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ebba15b40c37ba856a79bc847a08e71a","sha1":"a720af2936ab6f1dad28220622a18f7d338d44db","sha256":"3ddd883a1fd935ffb81a11e0d1dc9628d053175968f0446aa533104a2283c93c","sha512":"3f5b2f086d745a7475029b4fd91f57a953bffe5215314fba804f6b2387b8bb6e8cc1471d83c33a2fb15b0ae511beaf36b1170b39568b433ba7e7738ce28a5894","ssdeep":"","tlshash":"a1b01201855e117a0594105d4781557012e5413c2e5483bce63d46649b1620a5c47e10","size":91,"data":"","first_seen":"2025-08-26T17:46:37.227472Z","last_seen":"2026-07-23T14:09:33.214034Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Login-D1bcTUId.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de38b3b780bc40ee7b5915a114ff02ee","sha1":"b0f995e540c3dc87e5b9c3bb6f02e3fc7380af74","sha256":"0b71c88c273767a77adf6b12fb719073d763aeff5ffe23e00e8f0eb4bae7da19","sha512":"38a8138875d1f820161f19f56c3668a69197ac873b899711f889fbd7eb4a1cefdacb7557c354e1edf2bb9c83868c0f04689aaab5ea3db465f31f908d930b76da","ssdeep":"192:5MTu/YQNzN+dNWNTpknH3caQKkn3ELqKDN/5qxBy+d7PEwjNwzPZdasQWQ5QUgXx:5jYQJIUBoL1Ibp9JyisQWQ5QbDFHiq7H","tlshash":"5732b6c8b511abf99bb30825b6047935b4185f99c067c48ef3f84c317bcacb66a24339","size":11563,"data":"","first_seen":"2026-05-26T16:34:37.685565Z","last_seen":"2026-05-26T16:34:37.685565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-pkpYIZSh.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"967f8e19e4354b2718efc3cb619c894e","sha1":"595e53a851a12f18a89d77bff6c914f2f1681381","sha256":"70e1d43634ad2f7e55fcad91a131dc1084c2a20fb37eef24291e5a247a435cbf","sha512":"d1dc2f6cd2f0f0649cf1e1ed06cdf4783c301b4c4794c08dec09cd55e74a2ec41ad481a3236a602bbc93df8e61ec743adbdeb1919fd68d7739ddb923ba6a642b","ssdeep":"49152:u0ttEDk+tnHLtb9NJdWgnPnjwejTWllP1BaWmOUZi:B8e6Q","tlshash":"de958e8c76c6f06406f382e560eb1105f2786d45f446c0a4f9fc89ab26e5e9de267f38","size":1931416,"data":"","first_seen":"2026-05-26T16:34:37.759378Z","last_seen":"2026-05-26T16:34:37.759378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/dataModify-C6sk-dj3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"349f5b93e9d8dde770b2c7bb055dbfcd","sha1":"ba66f08093433ff9ae5b906faaf3f669f8ee75c1","sha256":"001315e8416480bc075df6a7ae1e9a205426501bb92987fda20e438d3dfd8d11","sha512":"eb8f140aa043b2cbe0dba7d2184fc8419bdaa5a117c24e442b2db79cd646daa913774f7dacd8e8a361ad0787a5d06462bdaac341c8518391dd7330387142b3f7","ssdeep":"","tlshash":"cff0d192df3af2b06da892811dd571962d1162547ca60bc091a2ae3115934faf29cb73","size":635,"data":"","first_seen":"2026-01-30T06:58:07.07812Z","last_seen":"2026-07-23T14:09:33.205061Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CookieConsent-D_DGtiMp.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4146847c78ba9c7df444d459f2e59a9b","sha1":"dcd095e2830da86352ee3f02bbd2b1de8e4202b1","sha256":"705837ef4f816f857696769a0d96f6b78c486b800caeb89c1c7642d6fb42d766","sha512":"abd6c4c0379ec6e15d04a5ff3048e7c9324e29fba9283afc257cf6f42b304bb19c51c9d2e06864f3509d5c717039c3ce6d747da8ea31c71e823bb880665374de","ssdeep":"768:ur5jgT5ISSBGZo4mrwrS0yIpdmjriD0PbnPex4:feVsmrwbpdeioX","tlshash":"0fe25c05e806eeb9d7b31634744a7168a4387fd9c25ac479a3bd85232bc9f728763314","size":32677,"data":"","first_seen":"2026-05-26T16:34:37.703817Z","last_seen":"2026-05-26T16:34:37.703817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Calculation.vue_vue_type_script_setup_true_lang-bg3Qly9I.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d5295970e0246d8e02e5d36f351f489c","sha1":"56d09f2afcf29a513512e80589768e5fedc8149a","sha256":"a6523b58bdd3833b452ec3f4af148428769bf2a87ff3ea21ce9e35482339d669","sha512":"433255d626a365b2b29341e7565665ae64ed0e17db6435253b6fbc5773bc4f8d41a17099da0d707bed69da69bd9ab3c94e03936314a46fc2530fe22ffde924f1","ssdeep":"384:dCSYvpyMTG1CmxcgKJcwV1e2cICuan1B2kLgpkDqaBoiA6mJWM5boWBuuD8daLHc:YScQYfK2cian/2ogpQqaBol6mbboyuu4","tlshash":"1192a749b152db3ddbb354f5605e1014e008bfcad426c497e1bf09933aeeeb11a6927c","size":20465,"data":"","first_seen":"2026-05-26T16:34:37.698868Z","last_seen":"2026-05-26T16:34:37.698868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_y46faqqj.js?v=1762548374","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d22c6b651b32b75a079b1bf27bb6802","sha1":"79270c37cbf8d3eb468e34ac18fb8867f0a79431","sha256":"a0567b165e111b66f2aff7a8eec80feff557afcaba53373c97a1fc6932375b6e","sha512":"8dacd987493a0a6379ceb313f6abfc27726224099b03fbddf2374e53ea687e0f0fd3310f1e572231c0bebafe37bd0eb1fa741726ecdddd6ef4bbb589ae842019","ssdeep":"","tlshash":"1e31ad515e9985771933322a9b3bb22cfb3127071501ae033efd6710af31e89ea65ec5","size":1818,"data":"","first_seen":"2026-05-26T16:34:37.738655Z","last_seen":"2026-06-23T17:25:04.386639Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Register-BlAjFq12.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f3092a61d71533b7ee2c4710924f8d9","sha1":"972bc98e6eb1e27381e5444c34eb9550d5ded093","sha256":"8883686c56f91f2b59aa4e3d6ef5d3cb24e821b988aa2f57418354b02d8328c3","sha512":"787ad827b19603e974704ce382914452a072889d460dcf44ee9f1645732fca0b14ce48fa33a819cbcf055ccfa93a64652b9a096d4f0cce337ebfc541517f309a","ssdeep":"384:GND6uozyk7mm+rwmee5dk5LY5IWajEJRq0g/Zk4Ltb2pVjkOymm+AR6eb0mm792q:GNDpoek7aF5i5M5tUZ5pyVjnjXYn0D91","tlshash":"0682678cb1519bfaab7b9430f4476930682c4f5fc463c0f6e6e88c35a79ec71a51423a","size":18430,"data":"","first_seen":"2026-05-26T16:34:37.714415Z","last_seen":"2026-05-26T16:34:37.714415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/TradeLayout-8DMUp-nT.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40e273fdf10084bb7ab63e4214310d4f","sha1":"eb28165e6d6be8086ac32a92cbf726b4db4ddf76","sha256":"1ae6945da5d8a2fa950c5b9cdd40edee1a492ac69da9eefe70b07fddeb377183","sha512":"969aaf60e15b7cc7201fdfd0bcf8d68676438be36b24278c52b26818ec0bb3b4fac4d50124eac7df1e8e14bcc7f1bc71f4ab3fac78eff45bd3fdc5e651ff4737","ssdeep":"12288:LifpUPYtI6xc2J46SImhZGoR9pe1m/5sAKZ:LSpUPYtI6+2J46SImhZGoR9RD0","tlshash":"d194e580b162e53993f391b5107a0401e3197f89b40a86adf27dccd73e9ad9971baf34","size":417812,"data":"","first_seen":"2026-05-26T16:34:37.708408Z","last_seen":"2026-05-26T16:34:37.708408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/SetFundForm.vue_vue_type_script_setup_true_lang-BMi24x5S.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9785a0de4b53dd66ac140e76ddbf93a8","sha1":"79e256d287e0ebd41865e23a3b35de34b1361761","sha256":"72de69027727c18f8f049335d0941dc32e15a14ca02d682256f41e8b0bb47aa4","sha512":"ab1dac1b6791ed1cb8b21d5114f6c774ea88d84c508fcd15cb0798bd626f7f4f1ed20e847c028f6073f255b7a303ac9391e91cbad97957a74c9453b5e7869b62","ssdeep":"","tlshash":"8351540d24b2cfff26c3a238224e2164e0c87fcfd7309755b66d407226c99f53619a55","size":2673,"data":"","first_seen":"2026-05-26T16:34:37.748923Z","last_seen":"2026-05-26T16:34:37.748923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/ArticleViewer-KSN9dlgy.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"885472930e19e2965ec84aff1afa7d4b","sha1":"3ea5c64e1a5f95adfbfee6c86e8a45cf0067b04a","sha256":"7543f79488374cc96f85a95eea23b55b46e293a512e882801bb7af5cf24d05e2","sha512":"baa21028d1b11a16ee54fc2185830ee403ab9762be56537f76d2674a251b7427843fd3e4bcc32c5b677a405dba38b8a66e99a5c10a60ce1457aabb273ad0eff6","ssdeep":"","tlshash":"5d41949c6076cfb896f39335a5ced6545044bbcad7118a89727e583a2fc0eb07a5c304","size":2403,"data":"","first_seen":"2026-05-26T16:34:37.692148Z","last_seen":"2026-05-26T16:34:37.692148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-CWyCZ68x.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b41554db642ef084816fbae804528b88","sha1":"d9c016c36b635b537329217400a250f63d51e717","sha256":"3b11f5a7215c83229d1f0ac62adadcfafef589da04f5f2dae62309ae500fd1f5","sha512":"cbd8be518e5bf450ba05b16346bdd4c29065611d1a3f07977c21e5fd4b1b78841c9b0c227ed5a5290baebce6dd7a1019bb7598701f57a083c2dc68db6bda298c","ssdeep":"","tlshash":"0661b4dd78b7f020877558ee50bb0636e23a37592408d0d4e01fcd8a3931d6aa2b7e29","size":3235,"data":"","first_seen":"2026-05-26T16:34:37.681599Z","last_seen":"2026-05-26T16:34:37.681599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/filters-C4rVqMy3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7aa99cc17c74217199888d64e79d691e","sha1":"dd7cf13135b994fb763520298ede186374dea648","sha256":"135813cd4f82beb239ce4d2c8c60a400da96f5118016bfd6d1712337b568dd9f","sha512":"18a38858bb2debcb8ea10c4dbc077e79479665adb0f799f9d927b1a6f35b9b260c19bc6b79bae4ca753c31a90e2d09a4d37e766430c572ddaecdf22ebf90b147","ssdeep":"","tlshash":"8c11ada995c6c77b02fbc8c9514e42c768d87f78b00e4b62bd64f1167561051f4be393","size":1046,"data":"","first_seen":"2026-05-26T16:34:37.741384Z","last_seen":"2026-05-26T16:34:37.741384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-Cvgbtb5j.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8b981c143d4eb54e296f8a9e1974c428","sha1":"00588d85d5ec8447dff514f2e360d787a4f29377","sha256":"fe43b15286628c88d8131f7ecf84096803eaff129db714a946cded6eb6d05cc3","sha512":"60ebf0c919e3564ace1438a3f12bf778591befd15ad20b3f337858e11304b90b903a299f2d7e925159057e7e8a9122be7732a00beccf4cdc90f02ff74d5bf340","ssdeep":"768:2040rUC3AsTTEHfjiJo1DHpIh9RzpsSWGhC19pLln0X3fcUgkKq93:00rUmAiGs+19pGn","tlshash":"8123832cb012cfbe9653193162ad2994e1497feec616c80af1bd18233bc2ff05a56765","size":47697,"data":"","first_seen":"2026-05-26T16:34:37.740037Z","last_seen":"2026-05-26T16:34:37.740037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-DdGeQX48.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7e28a4e313d96c5cab0fcc00fdeb7b2","sha1":"57ef9cdbef0bb1de03a3fd2d94a085bc6eb5105e","sha256":"140db2e58f817f41e7a9fb7bc45a4cefa7c323e07a46b0fd158fc5fabc27097c","sha512":"29cecbd5075414a119527185bcb8cdc036c25a456dddfd1b362bd3b25ba9c6213c02b169a0f7849d7579b705088167f37d01f4933f1a0eb2796e4f55be5ba623","ssdeep":"6144:3i9HsAKse+bX6hWtMseNYsxsNekvP61jTXLehPWf5+niXmhS0hHbYYl4UmtsRcXz:uHAse+D6hWtMseNYsGNekvC1jTbehPWp","tlshash":"396419847212b27a83f305a2543e4405e2257f88b507c4ddf1fc4cdb3e9ae9665abb78","size":336528,"data":"","first_seen":"2026-05-26T16:34:37.709375Z","last_seen":"2026-05-26T16:34:37.709375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/cssCalculate-VX7BHKki.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ce1a07f3d01ae4d3c15e0cc917158e4b","sha1":"72e2d8f92457931b3d813da969a71e786145dbf2","sha256":"128b5f4b42990b1b3f0ce0bad5af90e879b0941179991f2cac53531df662242d","sha512":"39bd9ec377569325f9d9ba3e34df028217f8a162adc827f8f86b06ed40fb228105cb5f94e6a2f4dd8e5bb22128062e38570a84984e777c219bf8b087ff185b78","ssdeep":"","tlshash":"68018ef8a5c1def79b4b563b0e6c492c718c5680ea1f82c2d72ca0207b402ecb132590","size":794,"data":"","first_seen":"2026-04-28T09:02:56.142354Z","last_seen":"2026-07-23T14:09:33.18878Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/NetworkSelectModal.vue_vue_type_script_setup_true_lang-Dyh_QqwQ.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2c6196d3dd360ced52c053dc7e992be8","sha1":"c8b10e6308af107d1417652e02b09f37cc644cf4","sha256":"8375a8101bfc7f457c0ecaf905f12eafd70652841aaf08d8ae4248c3bbea2910","sha512":"a31187269ae6e07f3cd9f9caa3fff3f5a2a4709f333560b8d47682a6c341e273329e8ec1e5d7a51e4844281e0eaec53597f898fffbb51eb63524682222a41dd7","ssdeep":"","tlshash":"c031350d9473cbfc95a391351b8a2168d1847fdada7087ccf36c14723aca9b3592d640","size":1510,"data":"","first_seen":"2026-05-26T16:34:37.747247Z","last_seen":"2026-05-26T16:34:37.747247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/loan-B-V1Mtv_.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b13a48e445f347fd9adee5e0e59e97f","sha1":"e3002d03496e50bb6ad667ce3d5557e006b4185f","sha256":"dd635f088a7620b7c311e56a98594eca4481dee471ae3c48c8aca3615f74e24e","sha512":"35bee595de79a8fe644e0bb6b350fd6cca3d4a72436a2b9b0828b21808e6e14b259457d67b4d077bec1b583d0ba8bf46072b8e9878f77870b3e6e7a20aabf77e","ssdeep":"","tlshash":"e8f0c8d6bd079a7e9135d62530933d02b42b9631def614702f16d4678b2c0896766940","size":580,"data":"","first_seen":"2026-05-26T16:34:37.713647Z","last_seen":"2026-05-26T16:34:37.713647Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CreateOrderModal-Bt7sL8j7.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b4b34fe985de6a8575b5cc020c23a587","sha1":"e5517112c40cf87bfe534c7160e2c44d214b6df8","sha256":"d549c6a457538f3719a9f6efd83cfc6648ae89126f18b2da8b8d6dff81d28bb0","sha512":"9194219b4881c1351dbb184ea6b7c4724c3cf0d2a87cb3b7520365404116190a625c00b2b375b4b36b9b899021925afbbe59345666f56b7c89df61775bf51adb","ssdeep":"384:a5/MuQAaJG8SdMmDiWdc9VGSSMSKp1k15klKkuLy26K:aJMuEJbOiWdyGSjSKp1A5aKdLy26K","tlshash":"3172d92c70e0c9be9473d176a2cd68244048bfcfc6635bcef63de66415d9ca16725a2c","size":16272,"data":"","first_seen":"2026-05-26T16:34:37.687641Z","last_seen":"2026-05-26T16:34:37.687641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e3916b922f6e89fef56ec3d30fc24f1","sha1":"39864de2655e9cb05aaced549d399ec6f768b050","sha256":"77f19f933dfce820e9ab4507206207ca46964edc5224fba3206261d74a3b0757","sha512":"4e9b8d49c5ddadee2aad4c3ecb9f204d9d56efe210aae8a58286d5ac9ea82affeb77751ee5c7408e6215eaaf2e7c698304bcfc43a13ff57e0ff55fd4b8fc6eea","ssdeep":"","tlshash":"04f0e21a52b850b4117bf33d738feb81363200c360489f513d1c5f840f6043846a1b96","size":518,"data":"","first_seen":"2025-08-26T17:46:37.312801Z","last_seen":"2026-05-26T16:34:37.76015Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/account-CD7Egf9l.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bce9edd4d611143f1e9c4ced8f732831","sha1":"9b53d9eda0ea287a794bb6fe6948259f96014735","sha256":"f5e06c3b305b492e1dd2f0e54d13a392801ae7dd9057377f7ffb1e7844fe8693","sha512":"8a2058cf0ee1e8c6f21a4679b2106b1f2f9aa7fce66074a8d3c483747f504c23ad02c04a376ec36e9b3d21f0e9a114cfe2a86ecf00c7e8054f467ce685ac74c6","ssdeep":"","tlshash":"3e11048a8e4a52b7fbb0be1260d12e43c00b6fb5ada24472b06d957751be045c62db14","size":1104,"data":"","first_seen":"2026-05-26T16:34:37.682966Z","last_seen":"2026-05-26T16:34:37.682966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aiinvest.net/js/index-CWyCZ68x.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-CWyCZ68x.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-ca3\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IMEZiMxrbDd9952dALRyg3VOG3mxwfijcSps%2F8zuOeZrDSIJmRYTGYIX923ByvcokRY%2BxRsdFUxy9xMyOqOvlYtXt3ohwm7T3Hce9g0bsREVwvajdSTd7XoY0phqmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3235,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3234)","md5":"b41554db642ef084816fbae804528b88","sha1":"d9c016c36b635b537329217400a250f63d51e717","sha256":"3b11f5a7215c83229d1f0ac62adadcfafef589da04f5f2dae62309ae500fd1f5","sha512":"cbd8be518e5bf450ba05b16346bdd4c29065611d1a3f07977c21e5fd4b1b78841c9b0c227ed5a5290baebce6dd7a1019bb7598701f57a083c2dc68db6bda298c","ssdeep":"","tlshash":"0661b4dd78b7f020877558ee50bb0636e23a37592408d0d4e01fcd8a3931d6aa2b7e29","first_seen":"2026-05-26T16:34:37.681599Z","last_seen":"2026-05-26T16:34:37.681599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/account-CD7Egf9l.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/account-CD7Egf9l.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-450\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJu8giYF3QpjV0rwv5PskccBUw214Wf9OfRU0N1vYgR3%2BKcK9%2BgG9IVuzOhU1cGEQiDzW1gyAtA7c4kEGX06MbjCDXs1YBPw6jwQzz0VILkL3VuqbBGd5KgZGBs0rZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f684c42b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1103)","md5":"bce9edd4d611143f1e9c4ced8f732831","sha1":"9b53d9eda0ea287a794bb6fe6948259f96014735","sha256":"f5e06c3b305b492e1dd2f0e54d13a392801ae7dd9057377f7ffb1e7844fe8693","sha512":"8a2058cf0ee1e8c6f21a4679b2106b1f2f9aa7fce66074a8d3c483747f504c23ad02c04a376ec36e9b3d21f0e9a114cfe2a86ecf00c7e8054f467ce685ac74c6","ssdeep":"","tlshash":"3e11048a8e4a52b7fbb0be1260d12e43c00b6fb5ada24472b06d957751be045c62db14","first_seen":"2026-05-26T16:34:37.682966Z","last_seen":"2026-05-26T16:34:37.682966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_7-MbUCZvwK.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_7-MbUCZvwK.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1434\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yv3Sb%2B0kjGNZIQ9VsWwcuH2eeA5S%2FyUnFnC51FJ15HQohcihWGGnwCRgOhGYevvhYWlRyigeRZFHrXCHL%2BRpOIzh1oF3uRpkgrCrqI3%2Ba7O1h%2Bi%2FQu6vSsbI5bWKhUQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc70b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"e38075ca6aec6851335c8a616c6f9496","sha1":"8152c7c77e00e84bfbf7d6f39fdded8ca7ef7c26","sha256":"6a3049f60479030d5b33caf22b842537e58c8dc871bcdfc6db2662c4edd005e1","sha512":"e5daec0492c9a3d5190d6722f142b72b6e855d97ef773601fdf8357c498ac740e7adec9a209221dec86b9d9ff6c5f4b17d729e80598d76ce858827b966aea75b","ssdeep":"96:8OSiMd9yT+70vrsi4pKQsMRjUUBdFvVhLf8Rbk/6jJ5qVVwVMUVycXg:8OSiM7xq/cRjUUtLURb7jvpMYXg","tlshash":"33b17de6e9f51f410ed83cb149fe70aede5bc07960a27e1c3468aaecc5254e38ac0941","first_seen":"2025-08-26T17:46:37.24529Z","last_seen":"2026-07-23T14:09:33.239664Z","times_seen":233,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Login-D1bcTUId.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Login-D1bcTUId.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2d2b\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBuAWYzDv87KOfrPwSaGU%2BkwBK3ve0zy%2BAS8EN9Azbjs41XBrzAf9mrihkZJ2ojqgCq03PZbhElApgn0s263fywoVqHhFrb0j0aMJP1lOpao2XflW7u328ZVqluDHG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f872a8eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11563,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11556)","md5":"de38b3b780bc40ee7b5915a114ff02ee","sha1":"b0f995e540c3dc87e5b9c3bb6f02e3fc7380af74","sha256":"0b71c88c273767a77adf6b12fb719073d763aeff5ffe23e00e8f0eb4bae7da19","sha512":"38a8138875d1f820161f19f56c3668a69197ac873b899711f889fbd7eb4a1cefdacb7557c354e1edf2bb9c83868c0f04689aaab5ea3db465f31f908d930b76da","ssdeep":"192:5MTu/YQNzN+dNWNTpknH3caQKkn3ELqKDN/5qxBy+d7PEwjNwzPZdasQWQ5QUgXx:5jYQJIUBoL1Ibp9JyisQWQ5QbDFHiq7H","tlshash":"5732b6c8b511abf99bb30825b6047935b4185f99c067c48ef3f84c317bcacb66a24339","first_seen":"2026-05-26T16:34:37.685565Z","last_seen":"2026-05-26T16:34:37.685565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/TradeLayout-BERizNCc.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/TradeLayout-BERizNCc.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-dfd\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1XCWHFTox8Hnu6w3jZD3o2%2BDzr1Xt%2FxQAmOB3qIAtdEhbRRFJ3uWdagNm7tYy0hyi2pOnwQVer7zp3LwH7jF4RsUsJoYLPQBxlfjAI8wgIxwfp%2BX%2BgaRMQ5ZatfG%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f874acfb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3581,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3580)","md5":"df06877444d1da9766e68d34fb113b37","sha1":"e28ddd7cfa87f0c2fb3cf9eea1dc5a4b3117e529","sha256":"936aa01a92fe7e5f7275c8595e470327c4b4f2e004e271c41016c7b85d69ef07","sha512":"e4734a9c837e2ba0bbf0259a02a6a189deae6247b047c8be3c1e9a8a799253e8d2bcea56860f2ffa222135e414c3cc24f82f0429c7dae396f0fb949b4a43bd2c","ssdeep":"","tlshash":"d47154a9b5082068a277e95595d402ad110de343f67309d6b301b9f88bc37f92776185","first_seen":"2026-05-26T16:34:37.686732Z","last_seen":"2026-05-26T16:34:37.686732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CreateOrderModal-Bt7sL8j7.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/CreateOrderModal-Bt7sL8j7.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-3f90\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhE82me5iybh8WF66D%2BlRzTRqvBsprvHbpwgbRrzVQAwzJ8x7QzyNjiRlEc5pV6fLBHnP7ANilp4Q2%2BqMNJ13LFHZEw2VTj1RkJ%2B85xbqw%2FX3BCsgKkrVklI77zJAqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876b14b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16272,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16271)","md5":"b4b34fe985de6a8575b5cc020c23a587","sha1":"e5517112c40cf87bfe534c7160e2c44d214b6df8","sha256":"d549c6a457538f3719a9f6efd83cfc6648ae89126f18b2da8b8d6dff81d28bb0","sha512":"9194219b4881c1351dbb184ea6b7c4724c3cf0d2a87cb3b7520365404116190a625c00b2b375b4b36b9b899021925afbbe59345666f56b7c89df61775bf51adb","ssdeep":"384:a5/MuQAaJG8SdMmDiWdc9VGSSMSKp1k15klKkuLy26K:aJMuEJbOiWdyGSjSKp1A5aKdLy26K","tlshash":"3172d92c70e0c9be9473d176a2cd68244048bfcfc6635bcef63de66415d9ca16725a2c","first_seen":"2026-05-26T16:34:37.687641Z","last_seen":"2026-05-26T16:34:37.687641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CreateOrderModal-Bt7sL8j7.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/CreateOrderModal-Bt7sL8j7.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-3f90\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J53%2FBKy32HLQ4vKOVPV%2BLHbVF0U54C689CjKeYbzfeJ5Sv2ZywvhV6683lWQqTTf%2BhUrxTPTlWhvBH1xpilHCDXnttxAdIQij4IHmqO0aNlxy34xUxb1z2zVSjoGVxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e49b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16272,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16271)","md5":"b4b34fe985de6a8575b5cc020c23a587","sha1":"e5517112c40cf87bfe534c7160e2c44d214b6df8","sha256":"d549c6a457538f3719a9f6efd83cfc6648ae89126f18b2da8b8d6dff81d28bb0","sha512":"9194219b4881c1351dbb184ea6b7c4724c3cf0d2a87cb3b7520365404116190a625c00b2b375b4b36b9b899021925afbbe59345666f56b7c89df61775bf51adb","ssdeep":"384:a5/MuQAaJG8SdMmDiWdc9VGSSMSKp1k15klKkuLy26K:aJMuEJbOiWdyGSjSKp1A5aKdLy26K","tlshash":"3172d92c70e0c9be9473d176a2cd68244048bfcfc6635bcef63de66415d9ca16725a2c","first_seen":"2026-05-26T16:34:37.687641Z","last_seen":"2026-05-26T16:34:37.687641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/cssCalculate-VX7BHKki.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/cssCalculate-VX7BHKki.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFWOlexkO9j%2FK9xjPNNWV72ZlCYDTtgGvv8fu42lU9LkIQMxU9Ga6tLl8vm7yQzC8NLArMIDbOzbS4EeDaGFtwYDEH4I0xnatiFsjB2Rf6PvXMFfJjYj%2F38As7sPWOs%3D\"}]}\r\netag: W/\"6a1448af-31a\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f6ddcdbb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":794,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (793)","md5":"ce1a07f3d01ae4d3c15e0cc917158e4b","sha1":"72e2d8f92457931b3d813da969a71e786145dbf2","sha256":"128b5f4b42990b1b3f0ce0bad5af90e879b0941179991f2cac53531df662242d","sha512":"39bd9ec377569325f9d9ba3e34df028217f8a162adc827f8f86b06ed40fb228105cb5f94e6a2f4dd8e5bb22128062e38570a84984e777c219bf8b087ff185b78","ssdeep":"","tlshash":"68018ef8a5c1def79b4b563b0e6c492c718c5680ea1f82c2d72ca0207b402ecb132590","first_seen":"2026-04-28T09:02:56.142354Z","last_seen":"2026-07-23T14:09:33.18878Z","times_seen":162,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/PdfViewer-B45GQKhL.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/PdfViewer-B45GQKhL.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdy%2BikVPyWeRYE18IR0nDiXESvgf5vUiIYKzGq6PP7CxA1CK%2BinthjSKjajT2kKzq7OwC496%2FhrRnR6eMjHQDwInvnnhpWm2wi%2BAJaNf3Zg4B%2B%2BXQ%2F5sw9AL1zG6tu0%3D\"}]}\r\netag: W/\"6a1448af-ac\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f684c10b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a07280d8c4487f94b1962d8eb4c60c95","sha1":"73584fe1844801f9c25e94ccc9dff3b20346c2fb","sha256":"cd0180dd43cdd6e4f0be1f78d4764975fd0abd9566ccf9210d4404d8e876ac98","sha512":"1b03fbfdad670899cdcf22896978f04a52fb6bbc48af9f0a6400182b7e30cbdd7d340bf4b3a082f824232134c66e891e39bcf834b4e760522d5988442d0b43b0","ssdeep":"","tlshash":"9dc04c23f185949d04125064159236fcdb3da50a634e1cf14b56f3766abd3c765364d1","first_seen":"2025-08-26T17:46:37.291739Z","last_seen":"2026-06-29T18:41:58.257808Z","times_seen":200,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getAllSetting","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2Bc4TM5I1mllOaYph4TA6tFOR55C%2FHSk8Q%2BNCfIWrZns03Lqil%2BDF7338IEHQrAzlYukXozZrpTXUVyoK0PT28V98ztyXDBffaQBlL%2BhoHymblSou%2B9MNSjDhqPhXgJmHn8w%2F1b%2FJt1R\"}]}\r\ncf-ray: a01e2f6cdc723181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43759,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"970d4f32d711bbefed2ceae2c2026c18","sha1":"47f15e6c9891e405eee2df4825c8b3251f3dad6b","sha256":"4eae6ee0e32749b9ad95cb657e0dc22326741a27f730023fa3beb2b76b780c2c","sha512":"276b5592efe06249cdc5a3dd3778d555030f9528d768cc123fdd3cc248f64b05745f5682a88d0f704d7541156cfa2877f017489c67199f25586408b890544f8b","ssdeep":"384:Q/fr+yZNxboz9DOJlDYN3HMhAj7r61CEV0IE0XQtD:IyyjxbozP/OJd2D","tlshash":"0713971a7568ecfdc6dd98c604773a6a35fc39bbe99e5c6490cd4e4c43e9431881b30a","first_seen":"2026-05-26T16:34:37.691033Z","last_seen":"2026-06-09T19:00:53.776996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/ArticleViewer-KSN9dlgy.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/ArticleViewer-KSN9dlgy.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-963\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rH3mwuHM7sSqyy2Yrpqvz5Xvn8iKS7e6%2BnpM7LnafYD78mCyL8465bBJoYTj6pcaAZriMglPtS9LwgCa1OSf9BGJThOPceAyPm1MMtMeZr98HGn%2FwdJa7%2F5sEyJSKpg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6ded18b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2402)","md5":"885472930e19e2965ec84aff1afa7d4b","sha1":"3ea5c64e1a5f95adfbfee6c86e8a45cf0067b04a","sha256":"7543f79488374cc96f85a95eea23b55b46e293a512e882801bb7af5cf24d05e2","sha512":"baa21028d1b11a16ee54fc2185830ee403ab9762be56537f76d2674a251b7427843fd3e4bcc32c5b677a405dba38b8a66e99a5c10a60ce1457aabb273ad0eff6","ssdeep":"","tlshash":"5d41949c6076cfb896f39335a5ced6545044bbcad7118a89727e583a2fc0eb07a5c304","first_seen":"2026-05-26T16:34:37.692148Z","last_seen":"2026-05-26T16:34:37.692148Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/crypto2-RVLsXywe.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/crypto2-RVLsXywe.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-ddcf\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPAIDg0G99h9T9%2B6iYNaFyqv7Wg7ZibA6u139%2F%2FAM9KjCZdOnK1U7yYVMf2Zcn6VBansiyfsl0kGp3gaYx2GpHkdWLXvihTisQrkCRfTrh3zatUnffLDoyw7pxAOrRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f727c03b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 305, 8-bit/color RGBA, non-interlaced","md5":"8a1eae471f4c0dc21007b86b97b5fd68","sha1":"b1ac51b4dd8a9a255a35326b1e0e3724eee7b431","sha256":"780f1d2b6644b5d7173ac032e83d0bcb58b2d0f8fa81911b15031918f3cb593f","sha512":"decf23d33c7f25185d1ce69a55b7ecfcacc46225c0a6cac3705c8c8666531831edc83b956a8dd0e714b0addf0cfec8e2e9cfd30738b652556ef113d9131bae4e","ssdeep":"1536:Z41T3sxtojtdJlqDe3dBB+5pfT8kbN5ahOaV:Zm3sxWtdzqDe3Dw5ZT/N5ahOK","tlshash":"e543024f4482be71cc64d7813f96923a11967d4afda0b4b08ea7a041cfce4ed72456af","first_seen":"2025-08-26T17:46:37.263184Z","last_seen":"2026-07-23T14:09:33.205578Z","times_seen":237,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/crypto4-C1r0vD33.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/crypto4-C1r0vD33.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-4bb5\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXxPoVi2OiA1CPP%2FA2bxvTSiia6i2QocIZZlVv7EE4Zb%2FBYFW58uQtF3VsTEw3GvJ31Rm0WXkF6xIsLlrVbmOkAFzxdynB0waLIYhNC%2F%2BTF3VukrIWXmOheCth7SjVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f728c14b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 304, 8-bit/color RGBA, non-interlaced","md5":"d067618d9d6147cf94031dc7b0e54f34","sha1":"9eac76e72b792627e4262bb3c3349b9a95e76a14","sha256":"51e7de570156dd0d9f5be2aea42306c4e0d810e2f5031ccff71f7a2b7707bfeb","sha512":"1cfbdb4d59b63b7508ddfde9cf307fbbbcc21c9eebcb17d05b5a52c0689acf9a6c5cdf75138ab87ae4d2eac26f12834fc4c4e0e23e94bcdd489b53264a93ce43","ssdeep":"384:SYrMlXfj/ycORUUZpYLOsa70OEU1pKfX9jLKAd6NL3UvOfaDYMAG3eQKRD0:OvmuUZgjatEU7KFjLD6NLasbG3eQKRD0","tlshash":"7692d14cf04b18795a05a41f191ad42bbd1ede7ce81b0123dade0d7945cfbdd9a44348","first_seen":"2025-08-26T17:46:37.293947Z","last_seen":"2026-07-23T14:09:33.196177Z","times_seen":237,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/remixicon-BVvFtaex.woff2?t=1734404658139","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/remixicon-BVvFtaex.woff2?t=1734404658139 HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aiinvest.net/assets/index-DT877FOE.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 176812\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\netag: \"6a1448af-2b2ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvap6dqXm0UNwc31UHq5Ohrkkc5imzQN70nIGk5%2B2pUluRPaBN4sFQcqr9n1QBYBCglKs7MyNqcV6jkSOOO8NCfITQLrxdE9mfRJbzzua6ZHNqhR%2FyWxQu%2FtHOpDfL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f733d3eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 176812, version 1.0","md5":"9f0118b43f57fc3ea9f55bbfb3a3b185","sha1":"f3ec7500bd2c615bba2de885d46bcaa91c20aa9b","sha256":"7ea90bbc7c505b98dd7d3a089a6fa32067e353150192951cedb05e26820936cf","sha512":"6a17cdb1c39d1638a2e69ac8c9cf15229d9f64ce9026965dd8e8878700994fd1db65f21be31e18a49ec36e0b0ca522d05ab7f3884b21a022d9ccde9795d0baab","ssdeep":"3072:8oI+omjEjOiEHbaa4yYDtZimTAj2QdJohF8EBGWXsL1u:8r+5baa4yYRTw2Q8C48g","tlshash":"300413f0eda0d72cd9c7fc12f48db606aa9c579475f790901bb0fef869ca4a8965c420","first_seen":"2024-12-20T14:28:38.376296Z","last_seen":"2026-08-12T15:42:06.315099Z","times_seen":2475,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":542,"receive":528,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-pkpYIZSh.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:02.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-pkpYIZSh.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1d7898\"\r\nexpires: Wed, 27 May 2026 04:34:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BWgqjjBNi2XZVN7f4tGnu4A1XBRmlKGSXsutm0i6vYU%2BJBpzLCAB7%2BQADXEDQC2Nuz9ehGM66LJvN%2BENA5BcXra%2BD0rLXPdXCwQPfbidD%2BcdkKvpSbamiqvcJI4dok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f5c9affb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1931416,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33325)","md5":"49e5f11cc60fcef918a10d02ae71a2b5","sha1":"9c29e87a1a3a0eab62a023ac038363956c8de3dd","sha256":"f41487630477ea4f7d7b2685c415e1cff9a6b952c88e417bdef60560c68b160f","sha512":"1648b4f6bebc5c5c9a7e725d62d31c49517cdb4e3dfed6334d417f386dc754d95925d56165488a9adf38c8fd18f16bbbd911f5c38bc14ecece8107fa05bb1a65","ssdeep":"24576:u0ttEDk+tnHLtb9NL9G0aX8g7knPnjwejTWlWOP1Br:u0ttEDk+tnHLtb9NJdWgnPnjwejTWllH","tlshash":"51256cd8b682f06107e755e540bb0006f3397e157449c0e4f6a999eb39a9e9ca273f3c","first_seen":"2026-05-26T16:34:37.695857Z","last_seen":"2026-05-26T16:34:37.695857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":753,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-DT877FOE.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:02.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-DT877FOE.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-374c1\"\r\nexpires: Wed, 27 May 2026 04:34:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzR1xoY%2Bg5rgkG3lfJIC2Ka4C0y%2FSlbjFNmf9nmcDLmmyiBjvyoch1E3uBH0tRwu0mCHz1iBc9iMg4cDy9CqIz3067UzcSqog7D3G8QoAfmtyRlY9POaYoHNk7k68Yk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f5c9b0bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"13911b402172e8a894b5a42945e06d9b","sha1":"399e1fa3ceac24da3a6fec000c836d79ce90116f","sha256":"7093d5ac63b0308b09978decc7143a1da6fbb0525eb3a28e3233086abaeedf3e","sha512":"632a07c95272a0802c4846caeba56e2e1cfeaaeac0244960e8ef5b1109e45d3b75cfafbcb625229091b8464feda3e3e6cfc5e2d2a7cdbaa30bf9f1d00dc95808","ssdeep":"6144:iExgAtraQez/J6ijqI+ChRk1Cfvkauh/X31uhE79QQ4R8eG+Qkq7sIZ36:n89Ic","tlshash":"f12455bde28904e63b36cca6d374778e6039f6b1c9955d95f81b501cefc33a10682a78","first_seen":"2026-05-26T16:34:37.696882Z","last_seen":"2026-06-15T14:39:03.649239Z","times_seen":4,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getCoinSecondList","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRxlwNDAiPwGlFr7klJq%2FW7GBAMjYyXc3GjnNV0dJ8mFWu1eC6RrIXrbRpBFG60n%2BD6nofzGS0%2FuX%2Bi9A1nhYkDzq4OHAeKCuuqIfLzc0HaYC8m%2BcKw%2B5pS2V26xHEZTGBlhWJsNrMk1\"}]}\r\ncf-ray: a01e2f6d3e7f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49016,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (48328), with no line terminators","md5":"ae3b07ffb1f83154cafafacc33013add","sha1":"9aad6c178374453ef7761d5db4c17dacf8f3ffd3","sha256":"859764a15c03bab17e4116a52ca8aaa7c488d1797cbd1458a65792d1948b7929","sha512":"d3c267bb6ab38c2cdd33fab51908a298d096bc0af7044aeaf8eb4c45de7b62df63780981c76e4ec39a3d0616c351266ede66710a01d1ec9a71007066d3f88a17","ssdeep":"192:7DJrkie4cx136got99vGiDeoZa11tEPDLvV2IvqfkICMOevc9WsfrdIN7f0XAnrO:TDePHVf0Zge+bzgiChi0NR/fTXGendUc","tlshash":"3623fc1eb664843c865048df5d533a53d29e366fed8c8b2a8def899520ecf7b7103906","first_seen":"2026-05-26T16:34:37.697867Z","last_seen":"2026-05-26T16:34:37.697867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":930,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Calculation.vue_vue_type_script_setup_true_lang-bg3Qly9I.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Calculation.vue_vue_type_script_setup_true_lang-bg3Qly9I.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-4ff1\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWtkJ%2F8f%2BXVGG0CAiLi7W5qNN0%2BjH6g6e%2BxsNKqqV5DQ1fRYgGR2A74LBXLzQSAjTVEYvMaymNKYmpX8%2BbRuGxn30nwuvcOZfKoGu1oYZBs4PgZcht%2Bz%2FtnJ3RKIlu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6ddce1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20465,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20458)","md5":"d5295970e0246d8e02e5d36f351f489c","sha1":"56d09f2afcf29a513512e80589768e5fedc8149a","sha256":"a6523b58bdd3833b452ec3f4af148428769bf2a87ff3ea21ce9e35482339d669","sha512":"433255d626a365b2b29341e7565665ae64ed0e17db6435253b6fbc5773bc4f8d41a17099da0d707bed69da69bd9ab3c94e03936314a46fc2530fe22ffde924f1","ssdeep":"384:dCSYvpyMTG1CmxcgKJcwV1e2cICuan1B2kLgpkDqaBoiA6mJWM5boWBuuD8daLHc:YScQYfK2cian/2ogpQqaBol6mbboyuu4","tlshash":"1192a749b152db3ddbb354f5605e1014e008bfcad426c497e1bf09933aeeeb11a6927c","first_seen":"2026-05-26T16:34:37.698868Z","last_seen":"2026-05-26T16:34:37.698868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Footer-CSQdyYmS.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Footer-CSQdyYmS.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2ca3\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sr62VpqFgErQ1ekS%2BXexXi7SsSQSPId%2Ffh3ml7TKb9So%2BKXjjz5rTfCHBI6vfAdHgy4y8sfvVdvnXoeuGZqvpnUuh4ZqUs7dF230AiG1r6rTmx5MzUO0UaU2hNG%2Bm%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6decf4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11426)","md5":"51fa88c3e867593047b1c004cdf0d195","sha1":"714d1411b045e092614e00ac6a03c1b54915dbd5","sha256":"fae29bdc65827b197fae376e3684e6c0a5d5d1559dffeed431e1f46397b81fdc","sha512":"0643e89c71d432e605635820a9a3b70b8a110088ca400b8ab520d54b65decf1cb5238ddada3868a6335ebfce0be8dc3761f8a7738a85cab733f478d06a40a573","ssdeep":"192:v3vNB8mwBi5GVBmTI2rDtA5/d3WIJ14RqCjuu0IUGjUTaqKjSTvS1wSjE8LGTM6L:Pvv8PBRPmTVDt6/d3WG14RqCjt0IUGjs","tlshash":"6c321a047977c9f9c6b784b5b8415510f238bfeee56bc85ab3fd890a17ced390a06260","first_seen":"2026-05-26T16:34:37.700108Z","last_seen":"2026-05-26T16:34:37.700108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/PdfViewer-DOyFPzLI.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/PdfViewer-DOyFPzLI.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-219cba\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdX0URl%2BnxQ3ojcRCXEA1PyVRkuig%2B0wXgIbWd%2BGqknK7jQK867b0SrR2ebU5q7j4LHvm1PhL%2BpQ5UjworsOnhWIpTkq%2BmrcL%2BkFYq081Yff3PYiTfwSksU0FzavZSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6ded1eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2202810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"e5af250b04e52439c7224efe027545d9","sha1":"f4c003c4ac6a3f2d61f179ef85203167fd1dbde9","sha256":"99d18af7a9c051a83fc763c75735bb65c5d33b6a9d07c8d11ad090d373aea9af","sha512":"d2b42276b8deb43c482f5da01a449664461316cebdf85da67b8633fbe4b10dc62d8cded9754fd1c9de118bc2b2b2b8181af61b68182c12c5c7fa022d073f06b5","ssdeep":"12288:YZapMfCJkxNP/XN8894qsbzAar4Y7hdKvWHbzYE/EqkMsxP706zL9bHIOdBEtHbV:YkpMfCJkPXXq8RqbOt7aFMz8","tlshash":"71258d24731a769d0aa900c370bd1589d3fe1609e062e1dcb78f7a9f6a6ec09673d734","first_seen":"2026-05-26T16:34:37.701176Z","last_seen":"2026-05-26T16:34:37.701176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_3-CoMiX5LU.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_3-CoMiX5LU.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1da0\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1PPO4ATOIZjmGtdkd27k8vwkx43b74feG%2BCT%2Fqc2Q%2F%2B0UWhDEK87YUkXJ0BRerHfv1G3aqJxShoJX9VmSVaqdZivnFwGbgsa95u1LvGOOzOq%2BGk9PUhqG5UQPD6MIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc64b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"a8b00a7e3bf2f70c8c4887d24abe8b51","sha1":"92ce419cdd7ab6e8d8e7bc05500761fbd08eaa9a","sha256":"8f98a9cc45245fbac829f6a93e5e24c3c5e3703ce68eb080d4c9421c297dee2d","sha512":"9db0c799a8dc0e938d327e0c20f3cb3cb98d3260668705dda23fb04e73efe9278988f6499b2f96df201da432efb01a8b5ae44efe08195914b02479dfe70bdc23","ssdeep":"192:8OSF296sDSSaQ+8CQ2twPskLuqpZ+DJ72iUyoutP3QB:+I6OSZs2tnkniYiUyo2E","tlshash":"c7f1b0d7a5e96df1f736311988dcd2037f0fb258a6a00a66f5039a84e7f450c870f061","first_seen":"2025-08-26T17:46:37.283171Z","last_seen":"2026-07-23T14:09:33.208605Z","times_seen":233,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getCoinContractList","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLfEYH94%2BhmUZs%2B90xF26U4ZIapiaPRX%2FFYuO8Vjc%2FIumxKpzv6fBlWEZuHG6mlcELq2ayG%2Fa1s5VSRLNh4zzvW8ITO0VMDmguZN2WWAiGFFfl54Fe1LjGSiynTPsaMLKMZQCYxCa7Pk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a01e2f757aed1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CookieConsent-D_DGtiMp.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/CookieConsent-D_DGtiMp.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-7fa5\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvjka630J14Tyk3Vp6d%2BThH1zBR5xI9QJ9k4ld%2BZpL70caQs6Xjc0tu%2BW4wMXNarsjlp5NN6rFu8PbBhMNpM5UbrptL6mSPKfBI9NHmXNdBDzUPJ2dss6YGeBEvVbxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f684c47b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32677,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28844)","md5":"4146847c78ba9c7df444d459f2e59a9b","sha1":"dcd095e2830da86352ee3f02bbd2b1de8e4202b1","sha256":"705837ef4f816f857696769a0d96f6b78c486b800caeb89c1c7642d6fb42d766","sha512":"abd6c4c0379ec6e15d04a5ff3048e7c9324e29fba9283afc257cf6f42b304bb19c51c9d2e06864f3509d5c717039c3ce6d747da8ea31c71e823bb880665374de","ssdeep":"768:ur5jgT5ISSBGZo4mrwrS0yIpdmjriD0PbnPex4:feVsmrwbpdeioX","tlshash":"0fe25c05e806eeb9d7b31634744a7168a4387fd9c25ac479a3bd85232bc9f728763314","first_seen":"2026-05-26T16:34:37.703817Z","last_seen":"2026-05-26T16:34:37.703817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/dataModify-C6sk-dj3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/dataModify-C6sk-dj3.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dktJ38D3C8iW6TKoym1Vstz%2Bw61ho6n24kCmcn9UDnJRtVUkGx4BAHUPgrDDuRS3lQ3nskt%2BWZh0V5dzqeZoV9vaG8k6dMPKLnfGuyfODsNdq1LPm07qQao7eOgP%2BqQ%3D\"}]}\r\netag: W/\"6a1448af-27b\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f6ddcd7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (634)","md5":"349f5b93e9d8dde770b2c7bb055dbfcd","sha1":"ba66f08093433ff9ae5b906faaf3f669f8ee75c1","sha256":"001315e8416480bc075df6a7ae1e9a205426501bb92987fda20e438d3dfd8d11","sha512":"eb8f140aa043b2cbe0dba7d2184fc8419bdaa5a117c24e442b2db79cd646daa913774f7dacd8e8a361ad0787a5d06462bdaac341c8518391dd7330387142b3f7","ssdeep":"","tlshash":"cff0d192df3af2b06da892811dd571962d1162547ca60bc091a2ae3115934faf29cb73","first_seen":"2026-01-30T06:58:07.07812Z","last_seen":"2026-07-23T14:09:33.205061Z","times_seen":215,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/crypto3-Bi713gOj.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/crypto3-Bi713gOj.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-b011\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OE232yrLn%2BDi2PKz57DJLTSmsWnXH2K37qRxvpkyK8yU72iBBMIzB3bb%2FeWEz%2FJiovazWJzKaFDP6s0F5oN%2BfgWVhItieNyvChwt%2BWI85ew3Ez%2Fz%2BWTrXhnX9hHMCEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f727c07b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 304, 8-bit/color RGBA, non-interlaced","md5":"7401918092026d21dd7dabc67295ef49","sha1":"53db5a70917874eaeed05b2e893bc51c3333fb5c","sha256":"5614ba3ba38256cc9cd354af165e23840713bd66181a33aa47b5746910dc45ae","sha512":"4875d2e3900f88a580d44720a02e6e934421dad709765ea34858f5a611c080febbe525fa52ee4f9d32fcb0a6e07bcd3e4243b43dfa2a737ca3f7659319bdb3a9","ssdeep":"768:lCCSfM5x3ifgWTfcVXTIae3k4NrUnRsK3rFh9WhT0v7zIf+B2ow:1SfM5kf/0VXle0OUnyK3gTPow","tlshash":"aa13021e41a4b5b23e0fbf571c29db00d3a7e7d58613da17c9d6855846050da31acefc","first_seen":"2025-08-26T17:46:37.219207Z","last_seen":"2026-07-23T14:09:33.19012Z","times_seen":237,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0ab2a655a74f740efa2025401359375ca.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ab2a655a74f740efa2025401359375ca.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2527\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FCE63A8363916B38E\r\nAccept-Ranges: bytes\r\nETag: \"9C5D020AEC325696D1D22476E7728DA4\"\r\nLast-Modified: Thu, 03 Oct 2024 06:55:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17182148815916858481\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: nF0CCuwyVpbR0iR253KNpA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 136, 8-bit colormap, non-interlaced","md5":"9c5d020aec325696d1d22476e7728da4","sha1":"e9ff2cdf5160142a77c449947e659627d7ee0a6e","sha256":"3fc4675d2a41c72bc9dd1c9568b0104320bc66b77a69ad6ced74fcfbf1e1d933","sha512":"a932dd67813eeebb6a1393473906fdfcb5cdda3e9428a111476983bdadf8e37f6b6a03773cb3ae4a9bba26b165697a59bf4fa86c9fc42c256246290bc397f665","ssdeep":"","tlshash":"a9514c978961de1fb26822d2c1c1b142acaafe4f117debbd90d4012ebf5c612911df4d","first_seen":"2025-08-26T17:46:37.24324Z","last_seen":"2026-07-23T14:09:33.198015Z","times_seen":212,"resource_available":false,"data":null}},"time_used":1990,"timings":{"blocked":856,"dns":35,"connect":274,"send":0,"wait":277,"receive":0,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/platform/likefire/touch-icon.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:08.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /platform/likefire/touch-icon.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:08 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a14489d-127b\"\r\nexpires: Thu, 25 Jun 2026 16:34:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RA6T%2BbgZf7ROhNkRSc4wRluUoq4HxPmXLDtU72rE8NCaFMh9dBgbVma2S9ehWjlqiOhxKtWPfIEr%2BU0uLFD%2Bbl%2FIwTZ9MPEjVo1bXtyhsDdokJwnWSd4exsu4cr2Rl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f821b5eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4731,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"461335a380110ba8b1acc2e42c216097","sha1":"4b8f7bd68da9540db942fa962b83c7a658cfcc11","sha256":"d1e58047a7d8f0b6a515a749deb30acf8c2880d204dbd0d9f54294bc5ddcacce","sha512":"88ab27ff80ae287cec4c340547c70b791e5cdcca21d70853c54ccf1257c6213b19b67c164b9057785c16d510486be4d1144477b4bf699a65a5ccab1c6d76cf39","ssdeep":"96:VuCJz2bqIoBPlwWhBIINJxdMBMUXYkKE/Qa4wLV4i+OpOA5xMqaa:II2e7DBIINJxdMB1PK4QaRLV4WYA5Laa","tlshash":"dea15c4e6ea7a406dd170c3e01bd76b8979c9d3bac591101316dbe28d6d10b87c43ae5","first_seen":"2026-03-14T09:22:23.978733Z","last_seen":"2026-06-23T17:25:03.601899Z","times_seen":5,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/TradeLayout-8DMUp-nT.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/TradeLayout-8DMUp-nT.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-66014\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0Yk4ceawayAvHOPo9xaqfja7F8id7S7IzMBNDzKp6qRTh0sqPsqw3EfdNs7XmuPwsXBsu7jYpfrsySm1%2FBIIOzSwStQBKixgmDIFHPzs95UvX%2FoLsq8bIF3M%2FvK0JY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8affe1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417812,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48052)","md5":"40e273fdf10084bb7ab63e4214310d4f","sha1":"eb28165e6d6be8086ac32a92cbf726b4db4ddf76","sha256":"1ae6945da5d8a2fa950c5b9cdd40edee1a492ac69da9eefe70b07fddeb377183","sha512":"969aaf60e15b7cc7201fdfd0bcf8d68676438be36b24278c52b26818ec0bb3b4fac4d50124eac7df1e8e14bcc7f1bc71f4ab3fac78eff45bd3fdc5e651ff4737","ssdeep":"12288:LifpUPYtI6xc2J46SImhZGoR9pe1m/5sAKZ:LSpUPYtI6+2J46SImhZGoR9RD0","tlshash":"d194e580b162e53993f391b5107a0401e3197f89b40a86adf27dccd73e9ad9971baf34","first_seen":"2026-05-26T16:34:37.708408Z","last_seen":"2026-05-26T16:34:37.708408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-DdGeQX48.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-DdGeQX48.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-52290\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Nnrv9xy9upd4oVjavXeXc5g5oMZ95IgYnB%2FH8TZ45zlA9J587gNNX%2BX5%2Fa0lTj1TWfoXNsAneysJ2Tomqweox%2ByxbK3AmZdE0o9f%2BF5j%2FI6Np7Su3Qh14mEzr670eQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8afffeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29586)","md5":"e7e28a4e313d96c5cab0fcc00fdeb7b2","sha1":"57ef9cdbef0bb1de03a3fd2d94a085bc6eb5105e","sha256":"140db2e58f817f41e7a9fb7bc45a4cefa7c323e07a46b0fd158fc5fabc27097c","sha512":"29cecbd5075414a119527185bcb8cdc036c25a456dddfd1b362bd3b25ba9c6213c02b169a0f7849d7579b705088167f37d01f4933f1a0eb2796e4f55be5ba623","ssdeep":"6144:3i9HsAKse+bX6hWtMseNYsxsNekvP61jTXLehPWf5+niXmhS0hHbYYl4UmtsRcXz:uHAse+D6hWtMseNYsGNekvC1jTbehPWp","tlshash":"396419847212b27a83f305a2543e4405e2257f88b507c4ddf1fc4cdb3e9ae9665abb78","first_seen":"2026-05-26T16:34:37.709375Z","last_seen":"2026-05-26T16:34:37.709375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T16:34:01.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z%2B9hIpOBLtLnTgZ2p1ar8Y0YwFP7zw8KeKcKFxng96DGw6HbUHwDg1KLtWLra0pdIliqIrN4O%2FreklYHabRlNzgcCh5zZ%2Fd%2FrFl6ZjmGSan3U7XMiqCLlEII%2Fy%2FNA8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a01e2f57fc5c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3701,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"06efc58874df5c12eead565760f46159","sha1":"08d5fb8b5637d7dc0e0691e32254526335e82d05","sha256":"a970564dbfda4bafeceedc1076c98aab418ec6bdbdeafef2013aede286e83b32","sha512":"020efef5c639511350ad7f436b50b021f0c4be0635f9fa3e59e9b054a59e82d9ef8635f21565c3056b13cd8ab3fd70b9bed800a5be7e2ff92e4aa0d10482397b","ssdeep":"","tlshash":"8f71316786b8dc5513a1a33ebfeab2458a3250c3960d196c744c29dd8fd1fa086e37f1","first_seen":"2026-05-26T16:34:37.710363Z","last_seen":"2026-05-26T16:34:37.710363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":66,"dns":46,"connect":1,"send":0,"wait":560,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/ForgotPassword-tn0RQdqM.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/ForgotPassword-tn0RQdqM.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\netag: \"6a1448af-0\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSSjcN6qjXEIzPOjby7w9ANV4iDBJEPtxZILzXjdSmCG1FE152S8u5lPKtAdcpkfQagHCDKJaeeGlLZUM6tGr66%2B6hu8H2Hymb5w9UKV4j3I65EfKVTkWakMvtfDpx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f681bd2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-BWczMgE9.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-BWczMgE9.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2a445\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfcBH4phmayCRJxy0QN1SKKb%2B3CnJFXPh7esLhp5wdO53gLnq6L0kdo09MfAMnYPID%2BF8tHCqgqggcw1Y27%2BhcgthV47f%2Bo4PhuwwVKiw1hHziTjgHO6CH1n%2FMWMRzU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f684c28b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173125,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"ee8bca78d8bc39fb6e8f2ce2f4d02e78","sha1":"a3643f5ddc87bb1a5ebd7e84ca771d328789aede","sha256":"e2fb86d55c4ad48498f7915e21de0f9e58d67029c5aa7b2f41d77e439f464418","sha512":"50dd5cf252bc2efd597e015813f0d9167eaeae21ede58cbd29f203de5463082e633f324afc53cca6b20d7a4b430ebd98ced0ca746029ffa6ff9f668a0c3c825d","ssdeep":"1536:e9R8Wx5TRoshtG80ZgNaeYXE+bUmN8SoFfefW8UjXGqW/lWBlxvH1hfGJnesv8ni:wRt5jTG8ralELZFOUnusSQilqw7ShHTU","tlshash":"d7048e4db221757a86f3568a42948110a6644f49f458c4fcb6bdbc272deec5802feff8","first_seen":"2026-05-26T16:34:37.711257Z","last_seen":"2026-05-26T16:34:37.711257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getUserCoin","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2Btnk4ObNpa3r3kTDupPGPDNK%2Btg%2Fbd1CtT51NdjWnZuFbOhb9sc2Ks8vHOL4O5ScMiylH1lyp6IrZ2S%2FgcUTrNvkFBRtAC2GWVi7c9iR9e%2FeSIdN0czTr3BA6DLHXvcN%2BNILoAllyFl\"}]}\r\ncf-ray: a01e2f6d1d963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323493,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"05b16d9f9ce5c71e92f749578a0ac225","sha1":"a9b3544c30044ff81432c6e90e673f78ff5d0c06","sha256":"dd31e026999a6df92e58aafd8d222f5bc6416971da9dc04af827bb4d92cb420a","sha512":"281cc7aa7ab18a4902bd6e38a827b860616fe8bc15d14859ca2c1ccc4d09bcd4a9a2f9c084b784ce853fe5d3ff6b21b778babc582346bc16bb5f00a659aee48e","ssdeep":"3072:r5rbdEpipK0OIk0pzaU6XZKQOQkzUD/UklD75MHiUfs/uiy5f94OVlaBBbXap+3j:rlbBpK0OIk0pzd6Ss/uxaBBbdF","tlshash":"cf64d071cee884cac5319cd21fc3aee41f9a37cb76df5c8109a91e015bc263991267da","first_seen":"2026-05-26T16:34:37.712314Z","last_seen":"2026-05-26T16:34:37.712314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-EIHkOClp.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-EIHkOClp.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-b4b\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCFtyhPsxfyIrR4DrPqbjik0mx8Kk00Hkyi3CsShiNzo4tLMl%2B5H3xyIqOKMFAKzzhKJiaRTDo8vacGJzHrqo2xyFmipzH%2BEneznU0tKH2QA%2BOfOEzIyYrcYXWh%2BqHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f874ae6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2891,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2890)","md5":"e2b71aaebb70e9b9a075538d0128b339","sha1":"d90b32889e7723efe1ee56f5c0118a45e31e6d2a","sha256":"1aed0258b2de3fd4ba4a2a34ffa712c6d042a2c392dfcc99ae702f4497b003f4","sha512":"18090fe93699109079a5093e809991bfe165954b651f7dee5b66b65173ae4ae1720c469c7ab49cf484140219250698a1c44459b031f956d55c7c41925da1aa46","ssdeep":"","tlshash":"e5515424b86841f79f7b936060e0470ca93d72d3df5627bd6bad11142bcbbe42ca2404","first_seen":"2026-04-28T09:02:56.135178Z","last_seen":"2026-07-17T00:47:37.551574Z","times_seen":147,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/loan-B-V1Mtv_.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/loan-B-V1Mtv_.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kg5dPaLVguye71ej5iNh7tcjjvZ1k4EItM7L5i2E%2BBUZiLPSbzTKa02XsYiNbKfM9zXJe%2FSbvNrobVGIE1B0TvwrwHMn8hbCj7hox65I8xVBjQmhExnETcMn76rQEo%3D\"}]}\r\netag: W/\"6a1448af-244\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f876b20b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (579)","md5":"5b13a48e445f347fd9adee5e0e59e97f","sha1":"e3002d03496e50bb6ad667ce3d5557e006b4185f","sha256":"dd635f088a7620b7c311e56a98594eca4481dee471ae3c48c8aca3615f74e24e","sha512":"35bee595de79a8fe644e0bb6b350fd6cca3d4a72436a2b9b0828b21808e6e14b259457d67b4d077bec1b583d0ba8bf46072b8e9878f77870b3e6e7a20aabf77e","ssdeep":"","tlshash":"e8f0c8d6bd079a7e9135d62530933d02b42b9631def614702f16d4678b2c0896766940","first_seen":"2026-05-26T16:34:37.713647Z","last_seen":"2026-05-26T16:34:37.713647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Register-BlAjFq12.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Register-BlAjFq12.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-47fe\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAus%2F65qwEplk5dxrgestA%2FjRm2L3looh1AXwoL2quhKYKY1Gki2b3Y1ZQUhlKp7G%2BmJWtYCaGWj%2BNFzdj%2BZDF1PKtibk5Oq%2BVkWVtTX0p7zPiGRT4NQf6Vq94p%2FU2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8abf7bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18430,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (18424)","md5":"5f3092a61d71533b7ee2c4710924f8d9","sha1":"972bc98e6eb1e27381e5444c34eb9550d5ded093","sha256":"8883686c56f91f2b59aa4e3d6ef5d3cb24e821b988aa2f57418354b02d8328c3","sha512":"787ad827b19603e974704ce382914452a072889d460dcf44ee9f1645732fca0b14ce48fa33a819cbcf055ccfa93a64652b9a096d4f0cce337ebfc541517f309a","ssdeep":"384:GND6uozyk7mm+rwmee5dk5LY5IWajEJRq0g/Zk4Ltb2pVjkOymm+AR6eb0mm792q:GNDpoek7aF5i5M5tUZ5pyVjnjXYn0D91","tlshash":"0682678cb1519bfaab7b9430f4476930682c4f5fc463c0f6e6e88c35a79ec71a51423a","first_seen":"2026-05-26T16:34:37.714415Z","last_seen":"2026-05-26T16:34:37.714415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/login-bg-CtTnvaIr.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/login-bg-CtTnvaIr.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmKur4RNVF7rPTLhKW5bfUuPk7h5Opcj%2F0OLohSIgazyj1g0jGtnJFSLiwO%2Fixov%2Blv8%2FcdcSo%2FDM8kiZtDsfT7DWuk9sxKdQ4hXwgrEgKICakaWPBYaCaygNroRN%2FI%3D\"}]}\r\netag: W/\"6a1448af-5b\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f8affe9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ebba15b40c37ba856a79bc847a08e71a","sha1":"a720af2936ab6f1dad28220622a18f7d338d44db","sha256":"3ddd883a1fd935ffb81a11e0d1dc9628d053175968f0446aa533104a2283c93c","sha512":"3f5b2f086d745a7475029b4fd91f57a953bffe5215314fba804f6b2387b8bb6e8cc1471d83c33a2fb15b0ae511beaf36b1170b39568b433ba7e7738ce28a5894","ssdeep":"","tlshash":"a1b01201855e117a0594105d4781557012e5413c2e5483bce63d46649b1620a5c47e10","first_seen":"2025-08-26T17:46:37.227472Z","last_seen":"2026-07-23T14:09:33.214034Z","times_seen":212,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_2-BPxk_UPI.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_2-BPxk_UPI.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-24b6\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HL1KYPJGbtYO19s8NrFrOTkxvbqte7lbz7PHwnfHdTKYXeKpZ%2FfLHiBKFl96Q9T%2BTAybfGlxD5i3xtlP3vLY6rHb%2BDaGSn%2BHqXK5Q44QubDzCV3b71vZQWzUM%2Bgth9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc5fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 187 x 87, 8-bit/color RGBA, non-interlaced","md5":"ce19171ad2413080ac589384fcdd4a01","sha1":"7b7da4a5cc5aeb1b1f10266de0edb0bacc2fdc30","sha256":"68582f4a49950d5778e05957baddfb31bc321607dfc5af01c519cb84f87ec0a7","sha512":"4282b94584460f26d89f307072438f1c29b017c81d4a5d3cef14d06e839a2953e304c8f3447907bcea56f84c0b2b87d4972405bb04da530de1a360865c579b44","ssdeep":"192:4S+V2BSNF7kJS4V2yFaVkIghjKpg3UhUyBL1xWczVDF7Tqxwyvgajoto:/wyM7kwbW6JkWUyIUDwqo","tlshash":"9312b00bbc2b7d3b7211f80944cc37a51c1ab8bd05ad839188b576951adee58d7e3ec1","first_seen":"2025-08-26T17:46:37.214917Z","last_seen":"2026-07-23T14:09:33.213548Z","times_seen":233,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-bg-Cig16shZ.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-bg-Cig16shZ.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aiinvest.net/assets/CookieConsent-BKtXZsW6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-b2fa\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FI4q6n%2FrkaGcQwKD2x5Tz2Jemzzmi18bnho14%2BV9zKl9H4B577zxwVnPEBtyVDH9sIO0uYlHGNAwVfAj2F7XvYl5WG3RQrKrIMwwg6Uy9CHiJOpji8ZjlEQnf5Di%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f730cf5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 706, 8-bit colormap, non-interlaced","md5":"c09495fae9b3b9afa21e4f85338186f6","sha1":"de7e184687afed539def40fcefe0e9315596e07b","sha256":"6e82c55cbd0ee19a044a5ec37c31769eeb6e168802c661640cc683e6b3e8733d","sha512":"8268075ddb43eb44937d88d3542d2fa595f0896f76c48ff52786673de1b486274d13880754df9605fa3b303bab65dd5bb02ca5bc33e88acda64dccbf16285fba","ssdeep":"768:A6+sg4W9+cPJlO1NctTpA2+fzAJjIaZjVcpjO6X0BvRURf0hrv4llB+86HFhekx7:7+sg4mnhlO1NUdAVfkJsdNS+MHe0r1PB","tlshash":"d523f20a976dc409b8497e7d8fa48700a882cf97602d873d7e913a1de938d534f89cbd","first_seen":"2025-08-26T17:46:37.246586Z","last_seen":"2026-07-23T14:09:33.237732Z","times_seen":235,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":365,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.like1688fire.cc/ws/f4c7bbce-bb6f-4557-b6e5-0499428304c3","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"GET /ws/f4c7bbce-bb6f-4557-b6e5-0499428304c3 HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://aiinvest.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7FJ+K/qUHNvm79fMs6E4mw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 26 May 2026 16:34:04 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://aiinvest.net\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: KLabqYOVBe2zdNp5HKt+hcW8KVQ=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RLQgsEeXWeozsrFmcGEx8%2FV7vxiDOwVCIOLGfBK%2BgGzrNGkffkZNLjUL2BJK1z2B3T7sKBMaxxoRhxCtfjU2Ux5DVD5Eme1FBYK1vMZNUdBsjzD%2FJxMau0qtztNnfDMktL0NgxHJKbJC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a01e2f68cc6ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=585\u0026min_rtt=558\u0026rtt_var=161\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3123\u0026recv_bytes=1200\u0026delivery_rate=6652373\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=51cad16922836c58\u0026ts=628\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":84,"connect":86,"send":0,"wait":609,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/cssCalculate-VX7BHKki.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/cssCalculate-VX7BHKki.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=td6wx%2BfBxsKNyoWb3%2BjMd36VRwJZkWcmxir45kML6wJaLy4nDPgYfqurpctG6u3VG3ituqlS8DgB%2BbTiOOqXFNLJMQuZvffiQiJD8KdvYjtTIK5j1f8mIREt5Sb9MKE%3D\"}]}\r\netag: W/\"6a1448af-31a\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f684c35b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (793)","md5":"ce1a07f3d01ae4d3c15e0cc917158e4b","sha1":"72e2d8f92457931b3d813da969a71e786145dbf2","sha256":"128b5f4b42990b1b3f0ce0bad5af90e879b0941179991f2cac53531df662242d","sha512":"39bd9ec377569325f9d9ba3e34df028217f8a162adc827f8f86b06ed40fb228105cb5f94e6a2f4dd8e5bb22128062e38570a84984e777c219bf8b087ff185b78","ssdeep":"","tlshash":"68018ef8a5c1def79b4b563b0e6c492c718c5680ea1f82c2d72ca0207b402ecb132590","first_seen":"2026-04-28T09:02:56.142354Z","last_seen":"2026-07-23T14:09:33.18878Z","times_seen":162,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-bg4-4HzhR67G.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-bg4-4HzhR67G.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aiinvest.net/assets/index-B4CX758G.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-62509\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbQZ9q3gt2Pdag%2FZYAPe7Pilh3xB6tGlyvrAouECdEOjxKoXVdFgB%2FTY%2BIs45kjbb1Q4j34oWLUyEdXdp9HSHpK833P59s1MWCnaOuvZ0H3rQtFQ8muHKRqrTCsut6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f731d02b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":402697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 605, 8-bit/color RGBA, non-interlaced","md5":"e8d59ec576c7863d0a1634be119a9dd9","sha1":"904d9420707d71bcc8fe96d4bc3efd7bf6788e6c","sha256":"9946dbdc4e1830e4d974e4e2306b02eb2840791ae4fc3bfe803405261e8dffcc","sha512":"d7bb56461ed1d44c529ade4434da8ab75e6aba1771b1d76fe4ab4fd43edcecaecbc0a4fad78399b05d9a68a5df695e51e97e979462ee4c838c0dce1526be9695","ssdeep":"6144:LF22gP1p/A7+eFVOe5FE/FplkZ1CAauYMx7pHdxmDMbMzxMuVV58p3IDzZ:LK/NA5FwlkOArYMpxmDMIzjz5PzZ","tlshash":"338412c483210832ba90ee50b5618990d0282db7b405dd7517c7ff836777ba9ac7da9b","first_seen":"2025-08-26T17:46:37.261835Z","last_seen":"2026-07-23T14:09:33.228333Z","times_seen":217,"resource_available":false,"data":null}},"time_used":1389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":585,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXHbMzKu%2FV%2F2lnSOcnKeRym2sHdJPcMdw%2BD8CpIhnOURY9iwEUf3iuBuxdgwK10922pZVmKbYmb8I3K0%2B9IJe%2BBBNB1MwZsSISOSWdbkn5qDArkGMqtDPRjtQXRrUivKmhBhojkdeUi2\"}]}\r\ncf-ray: a01e2f732d053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getCoinContractList","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/common/getCoinContractList HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZYnaST7n690kcvjij0qAQ30hyY6O0Sje7ZpNo70kBBsqs%2BoekARbpST4tGnF%2BfW5cSwIHBLZ%2Bod00bklb1nY4UL7XUJgkrvuz7Vginx7W2cK6PI3OjLVBuRzNKb%2F8C676hbsdEfAHRd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f76db611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80320,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"04d426867f0b6068821925f445ea2754","sha1":"8b1c9eec0e25048dcfe167821aebb77be496f477","sha256":"b2f61b9cbffd21b15f4fe61df9bdfb8b682f82bbb53707c72dbc96120faabee2","sha512":"4e5abb75043f682f36c87ae7f942041d4626aff46b0aacbb26e92a9a9c97b0fb837bdf1ac077c2bfe1fa8bf9efeee0e890879b55f505883d9cfcab47e84a7d3a","ssdeep":"192:mWXRXWXKXWHXWXXvX67HXcvYXCAXyXCWXCWXc2WXoWXtWXrjm4WXxdUWXpWXEqWz:oJejmDrapPdn4VAT8VCN66C","tlshash":"3d73ce41163865f9c630e0d42f2b790692ac35efadce482696cecd994ad4bf2670af05","first_seen":"2026-05-26T16:34:37.71816Z","last_seen":"2026-05-26T16:34:37.71816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/XRP.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/XRP.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FCE63A8363968B38E\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Tue, 22 Oct 2024 11:42:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-12T17:51:56.894159Z","times_seen":896,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getUserCoin","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/common/getUserCoin HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTiwTpdQcIEBhtsMOGpSu6Z6ZsI6b3hYaCk6GwzhJp3grqCrGw75MBddI3pRe70ROK16nSOz9KYRpKlRGscNVh6vqtKhPlm%2B3Pl1py1Kc6xF4fGSEt6dNuSs%2FCuYu9E6%2FlJAL9OnBH8U\"}]}\r\ncf-ray: a01e2f689eef3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":59,"dns":7,"connect":3,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/CookieConsent-BKtXZsW6.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/CookieConsent-BKtXZsW6.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1939\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HL0jr4JMAKMgMykWH%2Fab7bNRhbT5MxWyMLPJg7Led0CQ7DYX%2FgWqgBpfXUzfQO2yPgQS7rrVYyuDs9ilwJQ4vaUBo2aIxi%2BiuZ%2FcfjOnhMynMJmcyPEI7QvND9CTW8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f683c05b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6456)","md5":"1149d91279806327d1cf129fb88561e4","sha1":"64a0d38ab7c0b5dcc85255064a404c5faea0e413","sha256":"ead0cb6d3b9cb7c7ba752b1a20cfe31c362fb850dff7077d0a6bb1c1229bbb73","sha512":"a32f4aa95f8b53e74371a2cf0c459b2959b0a017734332ab04a2bb0cbbd974d3c1e9963ef7e9cef2dec986510b4f0188c7aacd045b40e793c567e28686a7802d","ssdeep":"96:UMwlRU4q7ekoIlbffKu28Y6NRyuHwwlUxiun10aWNPG987:lMpq7eJOffhLYP2WxDhFK7","tlshash":"81d1ff717688b01db13fd87561e12b9c3228e207d7325ab8964bb57c89e72873336bc4","first_seen":"2025-11-30T14:17:39.787592Z","last_seen":"2026-07-23T14:09:33.226874Z","times_seen":215,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-B4CX758G.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-B4CX758G.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-22b8\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z20qDhHUYgKVNHbDa8rvVPS3lV7llbgPW6edYmh4F%2BGDL1SfH6%2FiqidQW7cOptAleMOFRwrb1PYnA%2FQIMEcQbzRkm8troWa7FTIWjlSMybHBXFeW5ZxMFQfRzyQ1wcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f684c21b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8888,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8887)","md5":"365152d1a172a0dee690e108c0e563d9","sha1":"19387e4993b29c4ed320a2b31b0d33fea2606df3","sha256":"249b413b72e45131c9a2d1360e03b90ea3b11bd380bdd877b5ab6c99fc9694b4","sha512":"838b657752953eb242073129b94d1fb5fb8f2a74e112c99ca25f34ed39e5301c9835c5d07cc4c0a16673293e84acae267d61e61bba5a77848da0a44c2a8efebf","ssdeep":"192:fpKymUJbiKnehJTJdKSme+jeH1Zpbw7GHKY:fpK/UbehJFdKW+SVZpbXKY","tlshash":"bf02b630a3181c27a277cf155694e6fc5e64a123cbf7091ce2406e28dbfa5f4122eac6","first_seen":"2026-01-30T06:58:07.052438Z","last_seen":"2026-06-29T18:41:58.237305Z","times_seen":198,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_5-CMIV401Y.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_5-CMIV401Y.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-142d\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDZ2gaIJNE%2FyaJOaKb%2FvPbHdXMKdXJ0tSOfL3b2As9i6o%2FvQOKWfdO5dsMgJ6y2czQGP7aWEYzOsj7WxZxBr6z8CLGEwItleWkO30OWVI2krKwVZvB1I0oQBKUjq%2BX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc6eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 187 x 87, 8-bit/color RGBA, non-interlaced","md5":"8c29098b3d0e9ab466eb1881954e3d7a","sha1":"c8ff881fad14961afc827512e7aa876786992750","sha256":"d4a27de602d5c456720fad40a77b4deab49b1e79572473f835ebaa045d8d6a50","sha512":"f4f0843eed3363e5fa1723ea594014e7996b084db145b0441c9b4de081841b3b07518517424adfc1b8e35a0e2fe092f43ab261aac4b39fe2a0c0a2a8c673262b","ssdeep":"96:4SAnqpFPEsnjf4nxVqQpsje9GE2nBU2Jhe+W/WD7Y4kbPJdymXr:4SAGzMnxVGg5Qh9D040xdysr","tlshash":"04b17cd73931c365649dc920bdceb4c3c42f6038729631b90b74ed52c86b804919bf69","first_seen":"2025-08-26T17:46:37.22518Z","last_seen":"2026-07-23T14:09:33.242573Z","times_seen":233,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDpTlt7Wh1RMJZ1CVsWsCPagG01FyAYlfhF2SMBHOkno0V6%2Bvkqry5S1B4eNE9gOLOBz1bBodntwE%2FXjjk0USMAlBDaFAFyAG8OgKYvd9sk4EP135lOVhO9MYIfwNKIsSGk1g%2BE21Qg4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f755ae01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b4c9bd0d3d6d71c4eefa81feee23954d","sha1":"105f98507004a417d47feb40f8696da76866a5d4","sha256":"6971e165a2d960ddc328cd1a88d153a114c0c8ce1cc090cae4a52362e25ef91f","sha512":"ae4b50376728bdf544729932c786f94158a0a09239c688b0502a645b1e8963054375796e46a4668b82e819916a3a233089798c1739b833663184ff7cad4ec7d1","ssdeep":"","tlshash":"5e410d8f23688f75084614c326ed7ee6b36e525b86218c380556cfcc83f1ab9176b640","first_seen":"2025-08-26T17:46:37.257503Z","last_seen":"2026-08-09T02:30:21.141579Z","times_seen":66,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0faee608845cc4b4b9c961fbd0474f1b5.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0faee608845cc4b4b9c961fbd0474f1b5.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102705\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FEE24003931EF9970\r\nAccept-Ranges: bytes\r\nETag: \"055EC81DE6B009966CAB2AD9E1ADAC88\"\r\nLast-Modified: Mon, 30 Jun 2025 04:14:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 707856996214351869\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: BV7IHeawCZZsqyrZ4a2siA==\r\nx-oss-server-time: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":102705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 543 x 543, 8-bit/color RGBA, non-interlaced","md5":"055ec81de6b009966cab2ad9e1adac88","sha1":"d7336ca0a0e29b1babb26efec5825deac50b3fdf","sha256":"e86c2197156dcc79bc9dcc7e9ced586b7634ab0f2cc45e9b9524ed39bd29823c","sha512":"63bbc840794ca70aba2cc2dcb7c9d1d45a6eedf10638ad2034b7823d6c16853dcd9cbc777c64c7587890aeeaadc7ee98b85aa23bee7890140cb00d5728078b4c","ssdeep":"1536:/jQtOufT2jfePwt0JYjnPTprTbyNlIMKu576tlUGB9WMoPz6W6YlQ3CHqfnvnf26:/Utzijaw+J+rT+wy5mDU+0Of3CunvfEW","tlshash":"a5a312d360b1906a61cc67317f77cd1a16ea61c8882223cd14b7d96fac63182944b7ff","first_seen":"2026-03-14T09:22:23.987511Z","last_seen":"2026-06-23T17:25:04.440222Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":865,"dns":0,"connect":0,"send":0,"wait":313,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/DOGE.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/DOGE.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB80AB67323137F518C6\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Tue, 22 Oct 2024 12:00:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-12T17:51:56.925507Z","times_seen":924,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":1061,"dns":0,"connect":0,"send":0,"wait":274,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/CreateOrderModal-De4MFw1c.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/CreateOrderModal-De4MFw1c.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHR5CM4hI8xnTDlZ3sUUcmhsfkSzcQbkrTGNLHDlfvWt2q9jQ%2FYXU5jA4r4fhUpuQGh6RTUG8WZkgGn4%2B6L5lon8I7%2FgVnNrNL6hrw4NELowAq6Y96I44v4BjHzR35E%3D\"}]}\r\netag: W/\"6a1448af-380\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f874ae5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (895)","md5":"cbd343f17246767930d7cdc3a31afc75","sha1":"53f07e27207566ac0bff5087541d29ae88dbf93f","sha256":"50a406ccd97ba1abd8bb250ed95633f2aa6335867512902988da8148ec9a8544","sha512":"e90f43111a41600d98e32838e6f26b63835956482970cf9a0e3e05c3110a5055883c9be8c00d7adee72d237f900fa332beffac4a3b6e420a6a010b1a558a7036","ssdeep":"","tlshash":"0911365b7088a73f5c3bdba000a6a01e1262ff5b8c2113d50aea5193c99fee76512244","first_seen":"2026-01-30T06:58:07.103163Z","last_seen":"2026-06-29T18:41:58.204064Z","times_seen":190,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Footer-kqO8xzJ8.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Footer-kqO8xzJ8.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZE6s0zBCzZxt9M2Ng%2B9txx8Q%2FauQ6aCNB9SfQf362r4yD4RrIFOX1QeucBbujJMEgwsZSM6NNhs2y3NoW7gXviEbMOX3vcGk7xQd6B938gK26NvY6r8i1%2FWyBi3yDA%3D\"}]}\r\netag: W/\"6a1448af-60\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f684c18b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f2d8db841ee2cccba46a4846bb383b9b","sha1":"21ec1dc977ba6ee4b0fe0a042add8ff45f05ce42","sha256":"8b180be1698077bebaaf6beb91aa095652e82bdb700bb511b126055be7e155ed","sha512":"746edcc3f53af777995441974d93a876940ffe4fec86613f9f14d3801a2f9e7d0811f7d9ed5ecc3fb6525ae957665a71e779b3b391dd0435daad7586389ee8e4","ssdeep":"","tlshash":"69b0127030ef5567744f62b93015a2308159c106d3051e0c353c62fe39d20001157296","first_seen":"2025-10-10T02:51:18.076622Z","last_seen":"2026-06-29T18:41:58.210219Z","times_seen":199,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Calculation.vue_vue_type_script_setup_true_lang-bg3Qly9I.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Calculation.vue_vue_type_script_setup_true_lang-bg3Qly9I.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-4ff1\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aGfH4jaC3Ufo%2BAvwh1%2Fn4hIUMSM4CLh%2Ft2oO1%2BdxrMEY%2FHUmw7P5dFNLLihe4S%2FIKm%2Bstyjif4G7bexYN9AAxci%2FLX%2B7%2Feblqu9bGhOLGCFWATCPlMgwG33PAiYwNw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f684c3eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20465,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20458)","md5":"d5295970e0246d8e02e5d36f351f489c","sha1":"56d09f2afcf29a513512e80589768e5fedc8149a","sha256":"a6523b58bdd3833b452ec3f4af148428769bf2a87ff3ea21ce9e35482339d669","sha512":"433255d626a365b2b29341e7565665ae64ed0e17db6435253b6fbc5773bc4f8d41a17099da0d707bed69da69bd9ab3c94e03936314a46fc2530fe22ffde924f1","ssdeep":"384:dCSYvpyMTG1CmxcgKJcwV1e2cICuan1B2kLgpkDqaBoiA6mJWM5boWBuuD8daLHc:YScQYfK2cian/2ogpQqaBol6mbboyuu4","tlshash":"1192a749b152db3ddbb354f5605e1014e008bfcad426c497e1bf09933aeeeb11a6927c","first_seen":"2026-05-26T16:34:37.698868Z","last_seen":"2026-05-26T16:34:37.698868Z","times_seen":1,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/CookieConsent-D_DGtiMp.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/CookieConsent-D_DGtiMp.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-7fa5\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zcpUgu5jDVuNj60OTT4K2wtgAgc%2FVB2%2BUeFteHGwCaF4y9lKkgH%2Be3Y4XuuCVfYoMVG4gko27%2BwR85dJ1QRpN1TEEF7FUhNnscOi9fXY4ihptIWnyFU7iFrUqLbJsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6ddce6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32677,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (28844)","md5":"4146847c78ba9c7df444d459f2e59a9b","sha1":"dcd095e2830da86352ee3f02bbd2b1de8e4202b1","sha256":"705837ef4f816f857696769a0d96f6b78c486b800caeb89c1c7642d6fb42d766","sha512":"abd6c4c0379ec6e15d04a5ff3048e7c9324e29fba9283afc257cf6f42b304bb19c51c9d2e06864f3509d5c717039c3ce6d747da8ea31c71e823bb880665374de","ssdeep":"768:ur5jgT5ISSBGZo4mrwrS0yIpdmjriD0PbnPex4:feVsmrwbpdeioX","tlshash":"0fe25c05e806eeb9d7b31634744a7168a4387fd9c25ac479a3bd85232bc9f728763314","first_seen":"2026-05-26T16:34:37.703817Z","last_seen":"2026-05-26T16:34:37.703817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/phone-mockup-CPfpb_e7.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/phone-mockup-CPfpb_e7.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-3fdcd\"\r\nexpires: Thu, 25 Jun 2026 16:34:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW%2FTa6vKUy21mp7%2BLqWVKKDxwcBDtKhmkag6lQFPzwA6EedbdRm5KCvUXxM3tPWwz3kwJvWuq%2FfSHMblge59xoV%2FfsutG9GYPmS9i08iJFhBpicCnzUqrJXE59ul72s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f724bbcb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 1073, 8-bit/color RGBA, non-interlaced","md5":"3e14c28536628aa6f2daeb570847935b","sha1":"bec850de8e78d4e079df7a63669034ab9c2d742c","sha256":"95d3880d87d433ce0dfcf6e01249aab632f918094f177d037fce4f81aef5c548","sha512":"9eae404fdda53d8675ffb4328692d0c35a3db0269be1b1da73b0a5f1845060804d556123b2c4788f19c662af2a91ff45ce21e0af960b8ff8101495cdca47e63d","ssdeep":"6144:4WW67gM3Q5ss/10nRyw5V46IhmxEopl80:HWzaQ5sQ0Q6Xp","tlshash":"184412f4b20ae26d07969938ea0c9b45d656c3dfb08b36baf98f5046259ff314479c03","first_seen":"2025-11-30T14:17:39.769779Z","last_seen":"2026-07-23T14:02:29.856232Z","times_seen":111,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/crypto-CzKJroU0.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/crypto-CzKJroU0.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-9b3a\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYcy3LXmyGmMC1SsZWqHN5wJbRjiH8Ug4BUhfpvihtoD7pOw3D2NhlJAyuRaMPleYSf4zr0pJhfgAIFTq77Y3TAirxHgSpetSesdqcx8mngzR3g7HNNGWTW6NWA%2BBY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f727bfbb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 304, 8-bit/color RGBA, non-interlaced","md5":"d96f714646b573194b60928d259b4aa2","sha1":"6094806144be7f313efb1d6ce0394e2e1c916e8c","sha256":"f9dad38264fde116c4af1ca31c4f4e5853c22ff612c5aa1356fa788030fd3e56","sha512":"5bc291929ae2da85c57678debf71e608ef311660ff9030eeba1f254470ee822bbcf6347054399e30a4dda40829222cd69314bd0b87236c34fce12b36325bf234","ssdeep":"768:/uuO/MIYxLYmYAaEJCQgwW6scjj+189Qlf3AqpNabUesRt+HPi0:/ZO/MIYxLYfZEFgwRZvY8K5hpM60","tlshash":"2403f273f51364e85cb0e3ddbc8a7299647e91361ba148508411788f563cdb43fb64b9","first_seen":"2025-08-26T17:46:37.250301Z","last_seen":"2026-07-23T14:09:33.217812Z","times_seen":236,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Frame%202-5VaDbG1-.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Frame%202-5VaDbG1-.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1656\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7m66GazNCFFiUfn63HiKgnhNEcGkTMW%2BiQdrQuMnGPVREKjAEtjIHYLwhEydt7juqrIbZkMfM9iqh1n658ifTF0CKSX7mDLvwY%2FPlRB7s5Hqfw9ic7rGDmXZCDt5xU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc51b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 187 x 87, 8-bit/color RGBA, non-interlaced","md5":"5f758e18ae5e7982ead7774e8a97ef13","sha1":"a304ce7a8d6956e37c1ea3d82f6f973eb8233e90","sha256":"d2655ed85d2e3cf091024f70ce46667738e6b870ad988c9a5f8b12b0d0313951","sha512":"b3fbe74ead16f03b6546cf946a1618a78bbb6e55cc45f88c75373d12ad1de1ee4175b3657e90db6157edbee31e568f92c55f851db5cd548b8b1e79d28ea1440d","ssdeep":"96:4Sg5i+RYQPkBi5/bYtii54JP9UN/z+VVyxhSxlUXIiHDo+/aAX3+v5f9C+zEJ/Ot:4SAGxBc/vrGN/m+Sxa4Ao1A+Bf8tGl3t","tlshash":"39c19f8863f4c66000a04169a9d1c3af560cf5df01edbf947045a1d518eced6ee26efb","first_seen":"2025-08-26T17:46:37.251652Z","last_seen":"2026-07-23T14:09:33.207906Z","times_seen":233,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_4-Br3Z_v1E.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_4-Br3Z_v1E.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-145a\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWO%2FBQ9SjLCcssk6LnsBNLYBT%2Bn8rWg4KSv29Rbh9IEIyT%2F4thWUi%2BiTbkI0fTTU3vcxdoT%2BD49g7vSmqGSyBfMpVTy6mIdIEGLyxV6Usz%2FV%2B7vVahN%2BeXUnoAFO6AQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc68b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"95b8e27073c3c6e483b1a0609d083f9f","sha1":"2c4ef32b62fecfcb1cf70e0676f088c54a7d5fa7","sha256":"cf0f9d03ca1dbadd2bf8035de500cd44cd22693a30f552beff3c1ca19b014a5d","sha512":"bac6e493131b8b30a759e54276893c3544058d4a2540b7672013d49d5e2b3b6dd2a6ac21982e11ca156f7c7e0d8e2812b751cd6e3f8d1ac6189da8dba35c5a08","ssdeep":"96:8OSB6U77P8HDm2GqvjYUZKKmqVvLf8vPI1nlr8HznVGkvarcO12ReC5biF6vh:8OSYMPoDm2GqvLKKmqVvLf8vPIdlkEJ+","tlshash":"65b17dd37a01d0832e56b85bc39aeb609963344b87126a04edb1edcc1496ece0fd4ee5","first_seen":"2025-08-26T17:46:37.277551Z","last_seen":"2026-07-23T14:09:33.220634Z","times_seen":233,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_13-B2HuoVrN.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_13-B2HuoVrN.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-10a6\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dr%2FA9L2qJJ8U7UPgK8F24ibf30BOW2J0xDzdG0yVPQ9tDErqhyLrzbuGDIZgqK4107iaeSOcde4dlJ1RV%2FkP7uM7ccaZWEndKffSB8q9lfXRygyPIeebhMRoez07FKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc71b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"1e225322486da698930459293f9cdfcc","sha1":"09ca6066e08ce08ffc2a2d04b6d14d9ec9dafe64","sha256":"8151a3f93d70e3de89de9c9e95e0bf697d1a7f541d1734ba9df79ad7c58762a2","sha512":"bf2418af78b8d093f7560802048801899d09c5a7563c91d2d419020450598059f4ac777e7437e55c1b4ca37b71b92faa1cbd119a448b1cfc42b130a0f5986d08","ssdeep":"96:8OSWmUdZeggw367qTNvFnH5FaIeZAPjseHGYderXJNHNaw360UjtZ1YttBU:8OSWPZbjH7aF+Pj9GrXJNUwK0UjiZU","tlshash":"a8914dccd8d52f85aeed6e6ad4419b55573e1dfc9c149d8a34b0884a9c4037cb120e6f","first_seen":"2025-08-26T17:46:37.269188Z","last_seen":"2026-07-23T14:09:33.18443Z","times_seen":233,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getAllSetting","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLUVGtK%2FfQ0S2ALo69QT%2FRZ%2FUiZXqP3oFFcx0Yq63yiEYv%2Fci9LJYSpR7IPuM%2FKWerYH%2B6a837sTRIMvzNGtUQ2%2F18KDtlVajCDzUPhd9PpdCJoSS4NP34Q2waLKAN5fZCcoIwi4DnJv\"}]}\r\ncf-ray: a01e2f68af1e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":60,"dns":9,"connect":5,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Frame%201-BB-vAyLS.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Frame%201-BB-vAyLS.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1384\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olpk8%2BTfCLuZRHfd2%2BBbt6sr2KPsLwSQtqyDnduUQqoF7Iovv9GPj091lVdimSrbP%2FAuuSlWd84CijQmnnHHIFrj8d6j34wmsQ%2F1bRbsEYyvKRqNcXYOgYUQtMaCaq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72ac4bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"adc6a06c56ada71180d5f6aaaef2682c","sha1":"11752acaf2f9bafd7a0187cd635a299c300ec55e","sha256":"615b199dfbd53bdf6eed13bdbad7e1bc63c9d6b47b5b3941f941b83dc671390e","sha512":"766a04843d059ddfbf1e13d3b5fb00aaa98551e7db75dd84822a33ec3f3194246bc22ca8cf92a9e32f8c055670223d16014b146fc1b8344338d1941879c8b1cd","ssdeep":"96:8OSV/Ycg/JRPrmxexk/17o8HtfKyk4EW+DSSxyyd+WZe3pZ4ftOv3SG:8OSVQcgxRzO441o8NfKlbWUxprQ3pUtQ","tlshash":"31a16dc057e402f8536010362bd174af8997fced76372e8db098e37d22585a5909ecb9","first_seen":"2025-08-26T17:46:37.234646Z","last_seen":"2026-07-23T14:09:33.220158Z","times_seen":233,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Frame%207-Y2WnO9cd.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Frame%207-Y2WnO9cd.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-10a7\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuPfDchv1ni18TtrYgVAP8VhibwIT6%2BoSTLEL6rGLGfhOx17G%2FRx%2BZYqZX5kJAfG2XP9ecmP%2Fvh2rgAr614JxTed7X2YHiu4iHEJgUzIr5v2S8%2Fp73hHNxfoe%2B6HRSY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc57b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 187 x 87, 8-bit/color RGBA, non-interlaced","md5":"d5e5104db484a25110af449819dfd7ff","sha1":"d71c6ce1c4710fc41fd1c7e3528f71ef71cc6232","sha256":"19b5705c4832fd650e2dfa032ec9c31ae647eb51a7cfb6a8bdf91dfc3eb048b0","sha512":"4579d3e6605dceceb2d3c18ad431ad534b51f3a3a4f40dbee08820407dc3f97ce488136b6709675e6a84d6c58427a923d33fbd4ecaabe8aee935af183186c204","ssdeep":"96:4SqIjc9/X4edqkPCETKZ2OC+vk+YLoQh9skSY6gS54+rQ+:4SqIjc9/oe8kYZpV8QQh9ZSYc5xD","tlshash":"28916dc0bffd596ec8c7e8e4e585a48b6c7724acec5dc1088c71892e8575e331262b54","first_seen":"2025-08-26T17:46:37.295193Z","last_seen":"2026-07-23T14:09:33.238231Z","times_seen":233,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.043080b4dc709421a87781c67f84f316b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.043080b4dc709421a87781c67f84f316b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 140059\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FACF6C5363671982C\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"5DFFF9593B60761C2D121460ACFF9B10\"\r\nLast-Modified: Wed, 17 Sep 2025 05:18:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8499191405705657414\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Xf/5WTtgdhwtEhRgrP+bEA==\r\nx-oss-server-time: 22\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":140059,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 451 x 451, 8-bit/color RGBA, non-interlaced","md5":"5dfff9593b60761c2d121460acff9b10","sha1":"2158f616eb05feb49ed99e8218db0f7791da38bb","sha256":"572982c291b9b7085aa08abcfee0cdda058d11d70123fe12211ae91a544b17fc","sha512":"33afdab60be985b15955334ca44a4b0ed3813c5611020d11a7c65bf91513fb5fed2f86127641bd04f35887ae376e348c12cb703dc8f5e00ca09f249de54af6d7","ssdeep":"3072:fSMBh9i++jqapKsgfYc/P+1SQ+x8I6mR92lx8v4fD321TpFdC:aMpyqaptc/SSQfK2l7LGfW","tlshash":"bed312e6e3c54eb513db32236a86c8b4822f14002bbd7545f616d6dfe0c81adad4d3e9","first_seen":"2026-03-14T09:22:23.981896Z","last_seen":"2026-06-23T17:25:04.407588Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2490,"timings":{"blocked":835,"dns":39,"connect":266,"send":0,"wait":291,"receive":528,"ssl":529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.043080b4dc709421a87781c67f84f316b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.043080b4dc709421a87781c67f84f316b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 140059\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FEE24003931319970\r\nAccept-Ranges: bytes\r\nETag: \"5DFFF9593B60761C2D121460ACFF9B10\"\r\nLast-Modified: Wed, 17 Sep 2025 05:18:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8499191405705657414\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Xf/5WTtgdhwtEhRgrP+bEA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":140059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 451 x 451, 8-bit/color RGBA, non-interlaced","md5":"5dfff9593b60761c2d121460acff9b10","sha1":"2158f616eb05feb49ed99e8218db0f7791da38bb","sha256":"572982c291b9b7085aa08abcfee0cdda058d11d70123fe12211ae91a544b17fc","sha512":"33afdab60be985b15955334ca44a4b0ed3813c5611020d11a7c65bf91513fb5fed2f86127641bd04f35887ae376e348c12cb703dc8f5e00ca09f249de54af6d7","ssdeep":"3072:fSMBh9i++jqapKsgfYc/P+1SQ+x8I6mR92lx8v4fD321TpFdC:aMpyqaptc/SSQfK2l7LGfW","tlshash":"bed312e6e3c54eb513db32236a86c8b4822f14002bbd7545f616d6dfe0c81adad4d3e9","first_seen":"2026-03-14T09:22:23.981896Z","last_seen":"2026-06-23T17:25:04.407588Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2588,"timings":{"blocked":871,"dns":36,"connect":280,"send":0,"wait":289,"receive":556,"ssl":553},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.03c86672fe44c45f0849a5128322a881b.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.03c86672fe44c45f0849a5128322a881b.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71220\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7F4C8B373836974164\r\nAccept-Ranges: bytes\r\nETag: \"965B88CFD1D98B7610163538DD559E76\"\r\nLast-Modified: Sun, 06 Jul 2025 03:55:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15215870947680958813\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lluIz9HZi3YQFjU43VWedg==\r\nx-oss-server-time: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":71220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"965b88cfd1d98b7610163538dd559e76","sha1":"5a8fdf43d0070226302f8fd97f418e9f96fce27e","sha256":"cb4fd99fe8c6a07277203941e1f12cf17fc7475189bf3c564c61d4c89b91ece7","sha512":"f38cff9f916c8a333e35fdedfa1cefaee566e314bb33b9c6bf7ceeec0d34f7c9545299c0bd6d19ad890bf37af1a90d45ae304189d0cc49ffc7d18d1d5c17d711","ssdeep":"1536:4AtzwDcY1uBuLS02/BTra9n+IxTD3p6+FVRXl3fdhHH24bWN4LvX2:4EwDv1ukLf2/09/h6aLdhHH1PvX2","tlshash":"e9630205378c473db717ff70a981205ae97e388cbf068247bdc92a159418b6bd79d50e","first_seen":"2026-03-14T09:22:23.96834Z","last_seen":"2026-06-23T17:25:04.410581Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1830,"timings":{"blocked":774,"dns":0,"connect":0,"send":0,"wait":276,"receive":258,"ssl":522},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Register-sU0WBz8v.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Register-sU0WBz8v.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anVlfGA6kbehyd2TalYnwD7SV2QXr7UQgkog%2FFcuGY0%2Bdh18cf8UdtJZcuGDtQwi8HmX9zMlLzB1lK%2BiBf9Civ18L%2BScviHHOczj7Z4BXgGXrqyOGL8G8EHU1v0Xp80%3D\"}]}\r\netag: W/\"6a1448af-bd\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f873ac2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4973e00bf6456582a1ad1c4bebb670e9","sha1":"355d9c6f9e4bc05009b9052bb10b4157cb7d784f","sha256":"e9817a5b9b7fbceadde4627482218bf007a218e37820939fe18f44b3b8093116","sha512":"e7778122384be9f23b1a74c56d4beefd4144d8e6cc4e9b042a02f427c1d7d521ad8fe9bae5a4b6782996e7fc6de9677aa867b15ad3e841ce0a62bbd67ee4be54","ssdeep":"","tlshash":"9ec02202801e703a22afe39410a1828c002473efac320aac6f00310083caac0224e3cd","first_seen":"2026-05-11T12:41:59.433718Z","last_seen":"2026-07-23T14:09:33.203084Z","times_seen":141,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/TradeLayout-8DMUp-nT.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/TradeLayout-8DMUp-nT.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-66014\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnfTyDLWY9Xr8%2FIcoYxaUYabzlnf98B1F25WegvN73rDf8KKlHXC0%2Br8Z3sBv6n07CiUnltz2DaGw5RqIHESwcq1qYMZPfzvb44lYYu%2F4t%2BFSNWy5R%2BiTW5%2B7ZYg%2BpE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f874ad3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417812,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48052)","md5":"40e273fdf10084bb7ab63e4214310d4f","sha1":"eb28165e6d6be8086ac32a92cbf726b4db4ddf76","sha256":"1ae6945da5d8a2fa950c5b9cdd40edee1a492ac69da9eefe70b07fddeb377183","sha512":"969aaf60e15b7cc7201fdfd0bcf8d68676438be36b24278c52b26818ec0bb3b4fac4d50124eac7df1e8e14bcc7f1bc71f4ab3fac78eff45bd3fdc5e651ff4737","ssdeep":"12288:LifpUPYtI6xc2J46SImhZGoR9pe1m/5sAKZ:LSpUPYtI6+2J46SImhZGoR9RD0","tlshash":"d194e580b162e53993f391b5107a0401e3197f89b40a86adf27dccd73e9ad9971baf34","first_seen":"2026-05-26T16:34:37.708408Z","last_seen":"2026-05-26T16:34:37.708408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/bg_1-BEkGORMz.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/bg_1-BEkGORMz.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aiinvest.net/assets/Footer-kqO8xzJ8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1b1e7\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRCFzSeFoewSjxjZyQ4BN1ELI7P1EdHkiwqX0KrjGlEiaAhAZysQZXwUsIhJbDUrN%2FGV38GRye9HUk6z2vJSO3lvfEfdt5aCYrqTop1QiLrMtxrptJr%2FyI67u7JaOZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f731d06b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 223, 8-bit/color RGBA, non-interlaced","md5":"2667011e3e80bffc8f53b439e07ed571","sha1":"95f1f9ca0d80b2a0d88b15e41ff4c0804eecbd86","sha256":"71512d4d03b324477cbaa139206155fb48617658908eb7309b2abcf7691c9258","sha512":"d3038c24866b6edacd3c1e24f83285f7a03cb14a00552290d650042c6977ada5c6ecd88e9cfb85ec027398e450aa6b1718837198f2dd070d886049d31ff041b8","ssdeep":"1536:ZeZbH5ZJim+F0K+MQpgatMdAt8SgQh4LDyOBhOHQSTUFN4DoY84bAGB8d8Zf3p75:4Zb/JipFP+btwP4uFwQpksCBhpwvIqYJ","tlshash":"8ab31284374f43b9c666bc2d4c0fb950b7a68125b124ce84dff78417716aa3e8f89e61","first_seen":"2025-08-26T17:46:37.222479Z","last_seen":"2026-07-23T14:09:33.21229Z","times_seen":232,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getWhitePaperSetting","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"POST /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfrIimNMqlbz2hjf0DJfyCA3yQP9e3KaIS2dFTK3fVR9F3CGoNI5gQdzq6UgnvoXf2EQ77hPb8e6kcNN3IlB2gNg%2BHUrqq8tqYsgePdGU5vgxA1L6SyTuyWATZHIk4x4H7SQlfm1Tzie\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f756ae11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"04701350609f032d523577b062edaf69","sha1":"0ae57b21f7d2632de9a7ed9c4644c6b7b7df5669","sha256":"485b7644c151cd84868cc773a8d00d3646f517dd24a145c5de16d4e5e09f783d","sha512":"cc8e94e89205408b62d2c3ae69d0f239a178b7938cdb85bca5734f626f996393cd48c813295dc126c87e81f76e65cb000d77f4a9b9e2c2025acf16fbeaa2e5e1","ssdeep":"","tlshash":"8dc08c376a8cc07188a2a6ce613a5b09b4e538aa171051809c549e88e818abaea0d4cc","first_seen":"2026-03-14T09:22:23.915213Z","last_seen":"2026-06-23T17:25:04.438685Z","times_seen":11,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/BTC.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/BTC.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FAB673231379D17C6\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Tue, 22 Oct 2024 11:43:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-14T05:15:34.912853Z","times_seen":25935,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_y46faqqj.js?v=1762548374","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 03:55:20 GMT","end":"Sun, 12 Jul 2026 03:55:19 GMT"},"fingerprint":{"sha1":"70:AD:9B:85:F7:23:F3:E9:2B:B9:45:E1:ED:B5:7F:59:66:D0:A8:3F","sha256":"56:74:48:8E:C8:62:AB:54:11:1A:5A:19:3B:69:28:EE:A0:49:7F:0E:30:DB:25:6C:9C:BC:38:2A:34:BD:BA:D0"}}},"request":{"raw":"GET /js/ai_service_diy_y46faqqj.js?v=1762548374 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 05:10:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69dc7ae1-71a\"\r\nexpires: Wed, 27 May 2026 04:34:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJO8V%2BqBuXFppofsghqfMvXGehPBPewasEh0dT%2BslxE11xwybCQn0lv%2FA6RIHYjqfZZWsIlrNj7Y56gki8LMZapFOWgp7zNoY047YscSCB3iTTx%2BvB%2Bi9ObqH5PdVjVIUA7j\"}]}\r\ncf-ray: a01e2f7a0f6756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7d22c6b651b32b75a079b1bf27bb6802","sha1":"79270c37cbf8d3eb468e34ac18fb8867f0a79431","sha256":"a0567b165e111b66f2aff7a8eec80feff557afcaba53373c97a1fc6932375b6e","sha512":"8dacd987493a0a6379ceb313f6abfc27726224099b03fbddf2374e53ea687e0f0fd3310f1e572231c0bebafe37bd0eb1fa741726ecdddd6ef4bbb589ae842019","ssdeep":"","tlshash":"1e31ad515e9985771933322a9b3bb22cfb3127071501ae033efd6710af31e89ea65ec5","first_seen":"2026-05-26T16:34:37.738655Z","last_seen":"2026-06-23T17:25:04.386639Z","times_seen":9,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":76,"dns":55,"connect":2,"send":0,"wait":623,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-DdGeQX48.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-DdGeQX48.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-52290\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=somLauygv32MylqnsgwqkM9I2SV6H7xW5EXd1B%2BMjl22Y%2FXZuN49w5XfSmTddP9OlYwaKKGYnb50RSocJyqEYMXvFiQNBJcCRtGzYSq9Fz32gdmz5DsBVsz7Euhv8cY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876af9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336528,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29586)","md5":"e7e28a4e313d96c5cab0fcc00fdeb7b2","sha1":"57ef9cdbef0bb1de03a3fd2d94a085bc6eb5105e","sha256":"140db2e58f817f41e7a9fb7bc45a4cefa7c323e07a46b0fd158fc5fabc27097c","sha512":"29cecbd5075414a119527185bcb8cdc036c25a456dddfd1b362bd3b25ba9c6213c02b169a0f7849d7579b705088167f37d01f4933f1a0eb2796e4f55be5ba623","ssdeep":"6144:3i9HsAKse+bX6hWtMseNYsxsNekvP61jTXLehPWf5+niXmhS0hHbYYl4UmtsRcXz:uHAse+D6hWtMseNYsGNekvC1jTbehPWp","tlshash":"396419847212b27a83f305a2543e4405e2257f88b507c4ddf1fc4cdb3e9ae9665abb78","first_seen":"2026-05-26T16:34:37.709375Z","last_seen":"2026-05-26T16:34:37.709375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-Cvgbtb5j.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-Cvgbtb5j.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-ba51\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i16PAvMSme8l%2FaPLU3Tqb4lcG5RTcP0h70gYTauYIR8BJ7Mq4vxd0%2FnLBMnuSFijfW481HwsLHuTNXkXF14AcHdRDNmhEV6hnAV%2FjFFX8C9nh9z48r8yC3yWIleHfRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876b24b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47697,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (47696)","md5":"8b981c143d4eb54e296f8a9e1974c428","sha1":"00588d85d5ec8447dff514f2e360d787a4f29377","sha256":"fe43b15286628c88d8131f7ecf84096803eaff129db714a946cded6eb6d05cc3","sha512":"60ebf0c919e3564ace1438a3f12bf778591befd15ad20b3f337858e11304b90b903a299f2d7e925159057e7e8a9122be7732a00beccf4cdc90f02ff74d5bf340","ssdeep":"768:2040rUC3AsTTEHfjiJo1DHpIh9RzpsSWGhC19pLln0X3fcUgkKq93:00rUmAiGs+19pGn","tlshash":"8123832cb012cfbe9653193162ad2994e1497feec616c80af1bd18233bc2ff05a56765","first_seen":"2026-05-26T16:34:37.740037Z","last_seen":"2026-05-26T16:34:37.740037Z","times_seen":1,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-CWyCZ68x.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-CWyCZ68x.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-ca3\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ybr2pHDJZdgLfTsqAH8E8A%2FG7650zickx4O6rTd0%2FTgGMpvY3QD%2F8GlwIs6D2rXFdWkSa%2FY86kHqSD6%2F6wEiXmkl2yh%2FGFe2ZqIk918hzKRVhgA5pcImK51kwrzWtPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876b2fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3235,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3234)","md5":"b41554db642ef084816fbae804528b88","sha1":"d9c016c36b635b537329217400a250f63d51e717","sha256":"3b11f5a7215c83229d1f0ac62adadcfafef589da04f5f2dae62309ae500fd1f5","sha512":"cbd8be518e5bf450ba05b16346bdd4c29065611d1a3f07977c21e5fd4b1b78841c9b0c227ed5a5290baebce6dd7a1019bb7598701f57a083c2dc68db6bda298c","ssdeep":"","tlshash":"0661b4dd78b7f020877558ee50bb0636e23a37592408d0d4e01fcd8a3931d6aa2b7e29","first_seen":"2026-05-26T16:34:37.681599Z","last_seen":"2026-05-26T16:34:37.681599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/filters-C4rVqMy3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/filters-C4rVqMy3.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-416\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iulJoQWWfDReiUcTH%2BptUx4gWqJJ2%2FN79dyRknlz5RufjmX6fukDMcPkB85jZxqYkilB6g8h22oF4Y3RFl%2FvxIA%2BH2p7Eh9trwg5dZSra2CPU4ljMb31SmaLBT2%2B4t4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e63b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1046,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1045)","md5":"7aa99cc17c74217199888d64e79d691e","sha1":"dd7cf13135b994fb763520298ede186374dea648","sha256":"135813cd4f82beb239ce4d2c8c60a400da96f5118016bfd6d1712337b568dd9f","sha512":"18a38858bb2debcb8ea10c4dbc077e79479665adb0f799f9d927b1a6f35b9b260c19bc6b79bae4ca753c31a90e2d09a4d37e766430c572ddaecdf22ebf90b147","ssdeep":"","tlshash":"8c11ada995c6c77b02fbc8c9514e42c768d87f78b00e4b62bd64f1167561051f4be393","first_seen":"2026-05-26T16:34:37.741384Z","last_seen":"2026-05-26T16:34:37.741384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/PdfViewer-DOyFPzLI.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/PdfViewer-DOyFPzLI.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-219cba\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR%2F4wZtX4UY%2F%2BeTuAK%2FcT2LfhwJkTfhHYj11igtmJRpsBFwXqQb1ThG9Sbd4Oxfn8vEAIkwf1zEoX41SUdtGM%2FY2SGRNSoqkaCIzU8FT8%2BMqFhwFfwKR7EzXnRkdLSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f687c8eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2202810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"e5af250b04e52439c7224efe027545d9","sha1":"f4c003c4ac6a3f2d61f179ef85203167fd1dbde9","sha256":"99d18af7a9c051a83fc763c75735bb65c5d33b6a9d07c8d11ad090d373aea9af","sha512":"d2b42276b8deb43c482f5da01a449664461316cebdf85da67b8633fbe4b10dc62d8cded9754fd1c9de118bc2b2b2b8181af61b68182c12c5c7fa022d073f06b5","ssdeep":"12288:YZapMfCJkxNP/XN8894qsbzAar4Y7hdKvWHbzYE/EqkMsxP706zL9bHIOdBEtHbV:YkpMfCJkPXXq8RqbOt7aFMz8","tlshash":"71258d24731a769d0aa900c370bd1589d3fe1609e062e1dcb78f7a9f6a6ec09673d734","first_seen":"2026-05-26T16:34:37.701176Z","last_seen":"2026-05-26T16:34:37.701176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1407,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":715,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/tech02-fCe8e4gN.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/tech02-fCe8e4gN.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-15fe\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwZe0KfD2Zkg%2BP%2FPhCP0Ha0ehvAuWUi8LfWaCCpYel5gqBeXDXNuQwNojp6O%2B%2B5nQyapLdFLPXukhDaeLde30Xqrhy6YgxVMgqISpJXHTawLn3F0gr%2FTCVt5eIc%2BNZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f726be3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"9f0f4960f780ae1e5e85227bbe3383bb","sha1":"f8ee4ead676d1560556168f55b35d53fe32a6d41","sha256":"7cae8a74bc918d12efb430f71dd41d15d06ff373a260547749045449ef9f241d","sha512":"cb7b17a623bea5b449df7a2c0b27ce3e9f8040b3d51bf0be975a798349085e09ed86be8911600ed54a2aa48c11dcc64987c2d1e625560df781108a7afa4e8bc7","ssdeep":"96:A4+Vq+5u/C6+xiKXdoPS2bcPvnGSzKHRe4YebiR0u0tsroQiWcUU9+82gCUuSq48:A4+OKXcSfn7zKHR1YegwscQiUU9+vgCR","tlshash":"d6c18e4e24bdb9424820166045f90171d8aeef522a2f61189b61078ce9983fff5adbdc","first_seen":"2025-08-26T17:46:37.297934Z","last_seen":"2026-07-23T14:09:33.222924Z","times_seen":221,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/starslist-YIJi42t6.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/starslist-YIJi42t6.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-569d\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oavyHFBYoqGZ5BByFmFReZpNkTvAh%2BCdcb2DZHI3Wl4KcG0gHm%2BtDp6jar1AV84%2Fq8%2F0LW7GksgqDDWD1BWxXcifY%2BToXAF0gDzrNFQAPGrk1ssXaJuHssYMu6mMUaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72dc98b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2148 x 417, 8-bit/color RGBA, non-interlaced","md5":"78382c82dad9a7dd50655f44fb82f743","sha1":"5cb4a13ba952deeec34e3c4a5f0a1a424efb1cd1","sha256":"3bb15b8fd045ea090c833d5cdce05e097a4f9556f1a74b69232968b505895609","sha512":"f2297ebeeb0a47f59cd03b6b6079b3ad6c54aa1d585416a38ba5220a0a3a34b64a63f70b28460c34739441ba5237dfc5f560adcbdb00cceb83e5508197f687f2","ssdeep":"384:JojM6hkS9bZoCrjbih/rDyNRNMlOuDZ5lxYYWZLesJeDQu:YRN3iZrg3KOoZxqODQu","tlshash":"7ca2c01a9a5eecb1f92cf0313a834d30e9694452bde0c339b542c105feab4bc86b61a5","first_seen":"2024-12-26T23:29:40.083923Z","last_seen":"2026-08-09T02:30:21.122762Z","times_seen":227,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/assets/style/css/chatStyle.css?v=1779813247735","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:08.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 03:55:20 GMT","end":"Sun, 12 Jul 2026 03:55:19 GMT"},"fingerprint":{"sha1":"70:AD:9B:85:F7:23:F3:E9:2B:B9:45:E1:ED:B5:7F:59:66:D0:A8:3F","sha256":"56:74:48:8E:C8:62:AB:54:11:1A:5A:19:3B:69:28:EE:A0:49:7F:0E:30:DB:25:6C:9C:BC:38:2A:34:BD:BA:D0"}}},"request":{"raw":"GET /assets/style/css/chatStyle.css?v=1779813247735 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 16:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ffa1e0-b303\"\r\nexpires: Wed, 27 May 2026 04:34:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9KW1vzRQGXQGSkmFV2Xt4F3Nz%2BAzS%2FK44QP62eLB92iz%2Bj2xcbuef5QVetR1Z%2B%2Fl77NE3Ey6ALpnFuHC7K%2FPIz04CBRZVima6ZO2V2ESPwG99K0e9IeQ3EDcqE5Oi4VrkRY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f822f328deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45827,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1414), with CRLF line terminators","md5":"7f04d716a07903513dd26bdc041cded9","sha1":"87cc4821c93b3691c2cc6ed6c07504f9c5030d5d","sha256":"eca5ab3a8577e84adaf245950a20cb525d5c762c14576671dbcdfc9a46de476d","sha512":"f4a86fb88cfef3906b7debb45e8d4d02a58f4afbb14ff8479e630c3f8c84f97be7d3996d3e399f29498f31066c28fb7a63d8a83e00bc151686e434bf796cd0a5","ssdeep":"768:b8hjh3T4m4G4/4y738BY8+kJYcJHJlxGSndLcR4xhQ14YYi631N8VNi3rdwLcKda:Izr9l","tlshash":"b423433ceb65218da123b4a9bff16be5af514013df0b06a5b5f17a38c2504bd39712d8","first_seen":"2025-11-30T14:17:39.779365Z","last_seen":"2026-08-12T02:21:43.715918Z","times_seen":258,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Login-B_SJkevf.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Login-B_SJkevf.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cngFcS6h2cneX9PyNMnZTwZ1hB7EnU3%2B1J0EQHKq6c7s%2BujYosgOBLaZcwMUKx5h3SseLzdeB9pjLSMKuCZ%2F%2BNGptmlgu09KxdwJshq6ARdEuhRaVgTMdNc02c385Iw%3D\"}]}\r\netag: W/\"6a1448af-e5\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f872a80b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bae627bf13d569007ee014e7d11dd7c6","sha1":"b4351e257b02d016d18e9dfffa5a140f2fdbf144","sha256":"aed61187cbecb64a4b81f27208a0f93dda0961b46cb91cb6d6519def51cee05c","sha512":"77784ddbb35fadd017a3fa5b153e82e690d61dc49e698369fa33cc6bf98bbb84f9607b94cdf6a645096fe5fb32e957e6d9a46017fc2a5303a1146275a1a1e738","ssdeep":"","tlshash":"89d0c904755e142189b7866058d1c9980aaaa3d3363b88a833c356cf6f8325a642f5c7","first_seen":"2025-08-26T17:46:37.226419Z","last_seen":"2026-06-29T18:41:58.18577Z","times_seen":194,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-_ZQlEQoP.css","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-_ZQlEQoP.css HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-7a0\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FbxdQjQhagmARDgSZRZ4fCjsz2qP4RknnOlv%2Fx0olUSXp2ARyQ2duvYyZeknRKFYMGBsoILyYmblUlfGW1H23PTE6SFUmyGG2nIotTcElUP6Vtz6fWyaQWsjWD3Eh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876af4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1951)","md5":"8c2ad915b8ea855060e1d5dfb8446e7e","sha1":"faea44594e2d54856f2fa6f3e7f43058d1c5f551","sha256":"972b1e7d83c267067d143c7ac1f0b83b97c08c9542f4a6ae3234e427383f9003","sha512":"062c48fb88133fab7e7d2def69660d570e3ba3f87d6734d2225d19d278b69efd4d803236d0b0e1657dd3d9e10da037fab426154aecaa75f5ad24216dc207ac3a","ssdeep":"","tlshash":"5f4125e2b199138d33b79c3085d5e31d421af1c3e3a10bd862167bad6bc3b9a1d7d005","first_seen":"2026-05-26T16:34:37.74568Z","last_seen":"2026-06-23T17:52:22.119769Z","times_seen":114,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/filters-C4rVqMy3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/filters-C4rVqMy3.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-416\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnmPiu93cVVuvmNtObMXLR019ilA9yADetYTv2muFvdX1gLKHSOCyqFSI%2FC%2FTWqfP1iWCDUmb5tyoU9jFGnPBeRcYOe8Ct8VLlc%2BIl34IdfSnbaXYTDAM419Dd541Co%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876b38b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1045)","md5":"7aa99cc17c74217199888d64e79d691e","sha1":"dd7cf13135b994fb763520298ede186374dea648","sha256":"135813cd4f82beb239ce4d2c8c60a400da96f5118016bfd6d1712337b568dd9f","sha512":"18a38858bb2debcb8ea10c4dbc077e79479665adb0f799f9d927b1a6f35b9b260c19bc6b79bae4ca753c31a90e2d09a4d37e766430c572ddaecdf22ebf90b147","ssdeep":"","tlshash":"8c11ada995c6c77b02fbc8c9514e42c768d87f78b00e4b62bd64f1167561051f4be393","first_seen":"2026-05-26T16:34:37.741384Z","last_seen":"2026-05-26T16:34:37.741384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-Cvgbtb5j.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-Cvgbtb5j.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-ba51\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQ2z64gpNc1NoN7gT79rxnitizvaqODjpvSQ%2F8peNa1HtH6pzBn%2FifTK8qjFvHETPewZFQAkY7gNG%2FK0OkxA9RY2XfJGcZgqlTg%2Bbm34hqcRlLhG7VW2BZkSZMS3hTw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e4eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47697,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (47696)","md5":"8b981c143d4eb54e296f8a9e1974c428","sha1":"00588d85d5ec8447dff514f2e360d787a4f29377","sha256":"fe43b15286628c88d8131f7ecf84096803eaff129db714a946cded6eb6d05cc3","sha512":"60ebf0c919e3564ace1438a3f12bf778591befd15ad20b3f337858e11304b90b903a299f2d7e925159057e7e8a9122be7732a00beccf4cdc90f02ff74d5bf340","ssdeep":"768:2040rUC3AsTTEHfjiJo1DHpIh9RzpsSWGhC19pLln0X3fcUgkKq93:00rUmAiGs+19pGn","tlshash":"8123832cb012cfbe9653193162ad2994e1497feec616c80af1bd18233bc2ff05a56765","first_seen":"2026-05-26T16:34:37.740037Z","last_seen":"2026-05-26T16:34:37.740037Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getCoinSecondList","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/common/getCoinSecondList HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZtLpRu2KyKBzVe8j11h%2FOniV5rgrrTszM8AJIG7rZtrNqjtKPIkI8v0hySJI5tRaBqUMvrFp%2BADoAUjKiZSJ9k7ycQH3egTlbquND9hHb5pktjL1WJu4sCokNem9ItGaeogPEnWr8df\"}]}\r\ncf-ray: a01e2f689eea3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":56,"dns":0,"connect":1,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/cap02-DD81pVdb.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/cap02-DD81pVdb.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2472\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcEI7uKj3uIOqJw4AvqndCIr%2Bc4XUVt%2FGv6hYf59RVmr8qXy0XXskm0xtLTiD4DqrPTUYDmdvhUAxvVfQ9Ufgtuq6dZmwkodTpA04fBBjOCSXLwLOBYJtGT30FytzMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f728c21b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 133, 8-bit/color RGBA, non-interlaced","md5":"4ab1cf3ece753d1eb82627035c469652","sha1":"8fd4288260a2672c70428ee600390022604c5a42","sha256":"63b00e3bd41d39461d47872b23ee4a6a5a12f68cff29ce474bd400ac8c4498ff","sha512":"3c0ebdcbdf510c654de8780e0425b90c0fbce8f7c65894b7d4432b4f416dc66b26fa5b9c4c121313a10e6b736e9fde8b157bde0aca60077286dd35266de5fa7b","ssdeep":"192:RRHaX36Byum2m1yWAGebDn3stnesP3Mpb6l5tjp2GSb2lS/9HPIIu:RoGyHX1yWTWn8tne6cF6jtjzSb2lSNId","tlshash":"ee12bfc349926778264916dcb738e5807731a8920783c38ce4b5b528b1fed8c4e63f5c","first_seen":"2025-08-26T17:46:37.28042Z","last_seen":"2026-07-23T14:09:33.191127Z","times_seen":218,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/NetworkSelectModal.vue_vue_type_script_setup_true_lang-Dyh_QqwQ.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/NetworkSelectModal.vue_vue_type_script_setup_true_lang-Dyh_QqwQ.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-5e6\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gFcI2fpRLRKLI1DASZMPe0z%2BDtJOT%2BxVKFS%2FueEd18LpiEwDhJNOuxv9SHuNoPPw6wOralHiz1vxjvMHW1FbiNKHJ18%2BLMszVszJBc4h2kWXG7M5X5yENziaP4PUSQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876afeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1509)","md5":"2c6196d3dd360ced52c053dc7e992be8","sha1":"c8b10e6308af107d1417652e02b09f37cc644cf4","sha256":"8375a8101bfc7f457c0ecaf905f12eafd70652841aaf08d8ae4248c3bbea2910","sha512":"a31187269ae6e07f3cd9f9caa3fff3f5a2a4709f333560b8d47682a6c341e273329e8ec1e5d7a51e4844281e0eaec53597f898fffbb51eb63524682222a41dd7","ssdeep":"","tlshash":"c031350d9473cbfc95a391351b8a2168d1847fdada7087ccf36c14723aca9b3592d640","first_seen":"2026-05-26T16:34:37.747247Z","last_seen":"2026-05-26T16:34:37.747247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/NetworkSelectModal.vue_vue_type_script_setup_true_lang-Dyh_QqwQ.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/NetworkSelectModal.vue_vue_type_script_setup_true_lang-Dyh_QqwQ.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-5e6\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiAgk3RNSYzJRQQyxEaJVYtrLjIXTXz2NCdiA%2F0bEy%2B8tJ4pFeXAjO3XlcRyZsmFYoYlAtpW5CulNPgiFE7W7fKt4sHlJROmKlW0g5t7tZsT0M%2Fdk4zjaK9dr4ZiOIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e42b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1509)","md5":"2c6196d3dd360ced52c053dc7e992be8","sha1":"c8b10e6308af107d1417652e02b09f37cc644cf4","sha256":"8375a8101bfc7f457c0ecaf905f12eafd70652841aaf08d8ae4248c3bbea2910","sha512":"a31187269ae6e07f3cd9f9caa3fff3f5a2a4709f333560b8d47682a6c341e273329e8ec1e5d7a51e4844281e0eaec53597f898fffbb51eb63524682222a41dd7","ssdeep":"","tlshash":"c031350d9473cbfc95a391351b8a2168d1847fdada7087ccf36c14723aca9b3592d640","first_seen":"2026-05-26T16:34:37.747247Z","last_seen":"2026-05-26T16:34:37.747247Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/loan-B-V1Mtv_.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/loan-B-V1Mtv_.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zCfQMDgOOpvUaEvim4pf7DSgiUcmXr2VokiOTtezLMwYOYPuoBnV8e48OZ3dRJ%2BRYrH0RUrUBu62YxScPPtFX2PxNVqGNQd5Os7bc1ypylIlj5JxtuYZWdPSkLMtg0%3D\"}]}\r\netag: W/\"6a1448af-244\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f8e9e66b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":580,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (579)","md5":"5b13a48e445f347fd9adee5e0e59e97f","sha1":"e3002d03496e50bb6ad667ce3d5557e006b4185f","sha256":"dd635f088a7620b7c311e56a98594eca4481dee471ae3c48c8aca3615f74e24e","sha512":"35bee595de79a8fe644e0bb6b350fd6cca3d4a72436a2b9b0828b21808e6e14b259457d67b4d077bec1b583d0ba8bf46072b8e9878f77870b3e6e7a20aabf77e","ssdeep":"","tlshash":"e8f0c8d6bd079a7e9135d62530933d02b42b9631def614702f16d4678b2c0896766940","first_seen":"2026-05-26T16:34:37.713647Z","last_seen":"2026-05-26T16:34:37.713647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Frame%208-BqAgsyxz.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Frame%208-BqAgsyxz.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1c47\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLlliXbfWU6syVFDNtViOf7WvhJ%2FpIH%2FeRm3%2FnSJBGQyPDQQlewdE8x1vgesxztAfS0wjYWIfE5tianTtHOqxJXSuCaFh1ZtxzLKT2xy30O70oPNqt177%2F1EfDI18Gs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc59b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"75a72c4dea3d1c72958d06e43d016c04","sha1":"cf235da5a62609b4906cfd3eca2815d0010e824d","sha256":"fd587397411636272992efc7f82bac757bb590dab7d43397c81c7e8fbed942e6","sha512":"0ddce061afc227f09eb29ef76f8727d4912024661382f43f130594f8215f72890154a2ca9833f6bbc5a73b52ac17b93d242cc6613667e250a97dc064870d00d2","ssdeep":"192:8OShxXd6eltxGINi4o+REDb+riYu04FZwWQnv+wPInRa:+nzduUo+tu0cZInmAAQ","tlshash":"0ee19ef5689448b39a23843608c87f70db655b776fc149a670706a890e3127d66c2bac","first_seen":"2025-08-26T17:46:37.267799Z","last_seen":"2026-07-23T14:09:33.212805Z","times_seen":233,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.like1688fire.cc/api/common/getWhitePaperSetting","fqdn":"webapi.like1688fire.cc","domain":"like1688fire.cc","tld":"cc"},"ip":{"addr":"104.21.8.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"like1688fire.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 22:45:13 GMT","end":"Mon, 03 Aug 2026 23:43:57 GMT"},"fingerprint":{"sha1":"55:D7:79:1E:1B:8E:4F:F3:2D:BD:0A:D6:36:D4:CE:73:BD:31:5E:10","sha256":"35:50:D0:2B:F4:72:56:1A:69:41:E7:46:04:EC:C3:4F:D7:40:66:AE:E8:48:F9:79:00:52:CD:BB:59:7A:9B:3D"}}},"request":{"raw":"OPTIONS /api/common/getWhitePaperSetting HTTP/1.1\r\nHost: webapi.like1688fire.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://aiinvest.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://aiinvest.net\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFEj36CwPYgfwc2FMiZR6RDxxE8ngwfy%2FCrAECU1UuNe%2FwnStm7TfaJj6%2FhNUwB%2B%2BJKnQ0Jpg0MjSvlQcHn3ejiVPfVBYy9w8ke5HeBmAP39p%2Bt2kpSZ7h4dH0%2BD%2FsuKvYOOvVTq2hoe\"}]}\r\ncf-ray: a01e2f732d103181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T09:51:58.62312Z","times_seen":17884480,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/SetFundForm.vue_vue_type_script_setup_true_lang-BMi24x5S.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:10.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/SetFundForm.vue_vue_type_script_setup_true_lang-BMi24x5S.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-a71\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8EF9I1o7K%2FVPAjMhi1bIURmglugxQY%2B%2BILsB%2Fbh55i3LId4vv1AO51vbNemN2807PpIF8x55IKPmaWkV98abwBVfWtfcP8fkJdN3AnSJgxibvrq3nfINPjZt%2B6kEWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8e9e6db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2673,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2672)","md5":"9785a0de4b53dd66ac140e76ddbf93a8","sha1":"79e256d287e0ebd41865e23a3b35de34b1361761","sha256":"72de69027727c18f8f049335d0941dc32e15a14ca02d682256f41e8b0bb47aa4","sha512":"ab1dac1b6791ed1cb8b21d5114f6c774ea88d84c508fcd15cb0798bd626f7f4f1ed20e847c028f6073f255b7a303ac9391e91cbad97957a74c9453b5e7869b62","ssdeep":"","tlshash":"8351540d24b2cfff26c3a238224e2164e0c87fcfd7309755b66d407226c99f53619a55","first_seen":"2026-05-26T16:34:37.748923Z","last_seen":"2026-05-26T16:34:37.748923Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/dataModify-C6sk-dj3.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/dataModify-C6sk-dj3.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1uOXFhRPhpTLdq0dt%2F4Jz0P3YiiRZU0o2xA1XcAqccILIJLCY6FzIzV7A1rZBpqkk7qjBY4%2FlMeaxJAveIH9kh8ycDiTSIEowfyUuyP8FD%2FCRMlCaREtRee4LntKCI%3D\"}]}\r\netag: W/\"6a1448af-27b\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f684c31b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (634)","md5":"349f5b93e9d8dde770b2c7bb055dbfcd","sha1":"ba66f08093433ff9ae5b906faaf3f669f8ee75c1","sha256":"001315e8416480bc075df6a7ae1e9a205426501bb92987fda20e438d3dfd8d11","sha512":"eb8f140aa043b2cbe0dba7d2184fc8419bdaa5a117c24e442b2db79cd646daa913774f7dacd8e8a361ad0787a5d06462bdaac341c8518391dd7330387142b3f7","ssdeep":"","tlshash":"cff0d192df3af2b06da892811dd571962d1162547ca60bc091a2ae3115934faf29cb73","first_seen":"2026-01-30T06:58:07.07812Z","last_seen":"2026-07-23T14:09:33.205061Z","times_seen":215,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/ArticleViewer-KSN9dlgy.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/ArticleViewer-KSN9dlgy.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-963\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2axHl4Mvzm6JwDcxllRmtEQ0JHlDv37aOhE4vG%2B9%2BR%2B2BQXkxFRGw82ivzDX448BWyljGELFId5Gq1H5yGJUJ98nPbdJXLzE3fS%2B%2BSYclA8mOrhF7wVvvGmF9fEff8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f687c84b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2402)","md5":"885472930e19e2965ec84aff1afa7d4b","sha1":"3ea5c64e1a5f95adfbfee6c86e8a45cf0067b04a","sha256":"7543f79488374cc96f85a95eea23b55b46e293a512e882801bb7af5cf24d05e2","sha512":"baa21028d1b11a16ee54fc2185830ee403ab9762be56537f76d2674a251b7427843fd3e4bcc32c5b677a405dba38b8a66e99a5c10a60ce1457aabb273ad0eff6","ssdeep":"","tlshash":"5d41949c6076cfb896f39335a5ced6545044bbcad7118a89727e583a2fc0eb07a5c304","first_seen":"2026-05-26T16:34:37.692148Z","last_seen":"2026-05-26T16:34:37.692148Z","times_seen":1,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/index-BWczMgE9.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/index-BWczMgE9.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2a445\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPZFd6UtllDbKgmgmarbHwR9aIINkWVuemiU2AQUaYMGFH4joeNTI%2Bo1EdpKcN51XQlfJcEqppL0031ijh8kE%2Fhi0Uiu%2FqmK8pS0Hhfdh294ugFS%2BYA8ApRadmQrCos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6c6a7fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173125,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"ee8bca78d8bc39fb6e8f2ce2f4d02e78","sha1":"a3643f5ddc87bb1a5ebd7e84ca771d328789aede","sha256":"e2fb86d55c4ad48498f7915e21de0f9e58d67029c5aa7b2f41d77e439f464418","sha512":"50dd5cf252bc2efd597e015813f0d9167eaeae21ede58cbd29f203de5463082e633f324afc53cca6b20d7a4b430ebd98ced0ca746029ffa6ff9f668a0c3c825d","ssdeep":"1536:e9R8Wx5TRoshtG80ZgNaeYXE+bUmN8SoFfefW8UjXGqW/lWBlxvH1hfGJnesv8ni:wRt5jTG8ralELZFOUnusSQilqw7ShHTU","tlshash":"d7048e4db221757a86f3568a42948110a6644f49f458c4fcb6bdbc272deec5802feff8","first_seen":"2026-05-26T16:34:37.711257Z","last_seen":"2026-05-26T16:34:37.711257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/account-CD7Egf9l.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/account-CD7Egf9l.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-450\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BAm3edvCcMHWaAsUXeW5OOF9%2BVGRv8iIKTkUQFALXuiLDfmyyuw6m0eRpzYRWnHc%2Bn47HvKJ%2FR%2FGH%2FVKgVG4BIT30Jro1wpCk185pEZRKDw%2BaD4qM2jKY3SJ2SXMw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f6ded04b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1103)","md5":"bce9edd4d611143f1e9c4ced8f732831","sha1":"9b53d9eda0ea287a794bb6fe6948259f96014735","sha256":"f5e06c3b305b492e1dd2f0e54d13a392801ae7dd9057377f7ffb1e7844fe8693","sha512":"8a2058cf0ee1e8c6f21a4679b2106b1f2f9aa7fce66074a8d3c483747f504c23ad02c04a376ec36e9b3d21f0e9a114cfe2a86ecf00c7e8054f467ce685ac74c6","ssdeep":"","tlshash":"3e11048a8e4a52b7fbb0be1260d12e43c00b6fb5ada24472b06d957751be045c62db14","first_seen":"2026-05-26T16:34:37.682966Z","last_seen":"2026-05-26T16:34:37.682966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Frame%204-BZFoet9Q.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Frame%204-BZFoet9Q.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-1661\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEbTa9ajqQONBaiQ%2B8xvITWkrR9GFaikHwM8oaAg%2Ftbslz1S0qIsD0A7dbAfzYti6JHbxOWE5ITkRpb%2FOQ7tqmo%2FjK11mmXmicv7IPveNr5jd5tlL3DaunVaYbWFPuo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"c3db4e6b3340b588b927ecd0c523b863","sha1":"c2809f25a9992e45976739f32f2e9cab161ea7df","sha256":"46350bd8be7e27ea772bdf49836ce87165677e03ef1386f4660e01564dd42150","sha512":"3911815d12f41f1fc178e72f8a33ea8f9c481612f4c62a35c3a6a4cedf050d97cdfe8c31c8639e40c133b3a94a7e3270a3c983a54a734aff2951d6362e90fcb0","ssdeep":"96:8OSquQsKe1aEHC7jPd6PP4UF9Fmk5GZZu+khzgHkAu+Wg2u6:8OSqO9kc1NuofAu+Xp6","tlshash":"f6c1aec532f1afabd84b0c3490d67ec763ee8a5591768e0bb325a093e02e8e0120d875","first_seen":"2025-08-26T17:46:37.288981Z","last_seen":"2026-07-23T14:09:33.183793Z","times_seen":232,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/Low_1-6m8ONw4C.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/Low_1-6m8ONw4C.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-162e\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=432UjBAPx%2FbjKm0efE9cGFF%2BwAYYxveM4519EsLsphsIyY5S%2FnbvA%2BEhHYu9GFPE9SU1VtkXFFr%2BXxL2qq3CCWTmpVUZItX7sMeLlo2zMsgJ6yuccXuzV5RzhSgCJYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f72bc5eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 87, 8-bit/color RGBA, non-interlaced","md5":"5103c807ea33c534b2710ac6d158b293","sha1":"791ce9f7dab4d0fa9e1c68d9295fdbec555d599c","sha256":"f703e9a83bac8e20f95f9efab361f7d5490d3c1fc71990e0ca7d6b873a7de8f1","sha512":"5af38160b36582ae82b65694d8d559f71c505dc98e0045cafb5dee8674156a373f66e5e0901ed688f6c00767344a6f5c0f6e141ce914c8486c1b3041331bf2b2","ssdeep":"96:8OSaygjX4v9yeCz+ZZ68HHk2fWXp3+YdG2K3yZ178HnxmDZZBnDuS2:8OSco/LZZIwWd39P8HnKDU","tlshash":"4fc18cce55b2d9dcdaa41fb8234560381929e197e010bc02c935bbd42dc4509eeece3f","first_seen":"2025-08-26T17:46:37.287888Z","last_seen":"2026-07-23T14:09:33.196777Z","times_seen":232,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0d2526eb5c99542cc8ab5e2cbdf1e4ee6.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d2526eb5c99542cc8ab5e2cbdf1e4ee6.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 168688\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FE61358353398D44C\r\nAccept-Ranges: bytes\r\nETag: \"4C5734C3C668FE8734D7ECF70296E7BE\"\r\nLast-Modified: Mon, 30 Jun 2025 04:15:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 451474971542513682\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TFc0w8Zo/oc01+z3Apbnvg==\r\nx-oss-server-time: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":168688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 617 x 628, 8-bit/color RGBA, non-interlaced","md5":"4c5734c3c668fe8734d7ecf70296e7be","sha1":"c65176bfa1c22c9f98fbecc5e0adb55392f86558","sha256":"b1e1e0300309bf1fc2adf449101d9b84ae8ba0dc643582349f96405f34e67729","sha512":"c8815f6f23b98e10144dbffa434c270fdba5f00461d91c68ad79a55d14f5c76efee91f857b845543c3af2125d0b9de217a5d7e4de42cb9dbc19697030ec6ea53","ssdeep":"3072:rumpfsagYAbXbEjRP6EMgP9s49PYsyJN3L2AC0d8QbOH:rVfsd/E9SEZN/kNb2AnOH","tlshash":"79f32386546825e85f86b4e0f172f55401fff573c568789cb088e22e67c727a2e12ee2","first_seen":"2026-03-14T09:22:24.012777Z","last_seen":"2026-06-23T17:25:04.42012Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":306,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1779813247735","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:07.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 03:55:20 GMT","end":"Sun, 12 Jul 2026 03:55:19 GMT"},"fingerprint":{"sha1":"70:AD:9B:85:F7:23:F3:E9:2B:B9:45:E1:ED:B5:7F:59:66:D0:A8:3F","sha256":"56:74:48:8E:C8:62:AB:54:11:1A:5A:19:3B:69:28:EE:A0:49:7F:0E:30:DB:25:6C:9C:BC:38:2A:34:BD:BA:D0"}}},"request":{"raw":"GET /js/ai_service_core.js?v=1779813247735 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:22:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690d9033-44d2\"\r\nexpires: Wed, 27 May 2026 04:34:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQ1GqNaJRc6rUn%2F7yU48RL%2FqCBac7tgC79AbPLRovNVfyxco2EFtjUvZB0Ms4%2B6q5ciOpI4tEvQz8ySTe7FN6mbfH8FoOVx9jatW8TfkspawzljHk%2FcfSaF8JiE5iPsplvA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f7e6c878deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (496)","md5":"f18eea0d33964edbd612d61f5713fd75","sha1":"93dd1f6594dcf0f7cbdb44813e4c1f2072961533","sha256":"1bc28f480d9acf22346a0cc22379fce4b7971d6e647a55de5919e641db5cc597","sha512":"5cb694ca839128e6683a513174761ccf1c4147b28d130dc1425112756d81ee61a2c65baa2272e8284264a53ba658a4f77c1753291163dcc4fc5745b0538c5931","ssdeep":"384:m+6aLTFONgSMQDbHer4p7JCA8GaHOdRUHYAnUjZpeZgy4F4Syec71gAQ77/ZMTtY:5xTFeMQDbHer4p7JCA8GMOgYAnUjZpeS","tlshash":"a48241abebbb10724457b4368b9f268435268013294cde203facded04f52a675317bf9","first_seen":"2025-11-30T14:17:39.769051Z","last_seen":"2026-08-12T02:21:43.742234Z","times_seen":259,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Footer-CSQdyYmS.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:04.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Footer-CSQdyYmS.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2ca3\"\r\nexpires: Wed, 27 May 2026 04:34:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AsJ0ni%2B0qJeTrQj%2B054c%2B%2Fx%2F1hMoLIVzJiv8EFGZb6Nb28cCSwj3bV%2BbCmi%2BvsIbHNKMcDBP4sgXaXQ%2B9fVyGO%2BgMPVGaUh69nx7NMnPwRWMOXsIHldoFVKUPw6bZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f687c8bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11426)","md5":"51fa88c3e867593047b1c004cdf0d195","sha1":"714d1411b045e092614e00ac6a03c1b54915dbd5","sha256":"fae29bdc65827b197fae376e3684e6c0a5d5d1559dffeed431e1f46397b81fdc","sha512":"0643e89c71d432e605635820a9a3b70b8a110088ca400b8ab520d54b65decf1cb5238ddada3868a6335ebfce0be8dc3761f8a7738a85cab733f478d06a40a573","ssdeep":"192:v3vNB8mwBi5GVBmTI2rDtA5/d3WIJ14RqCjuu0IUGjUTaqKjSTvS1wSjE8LGTM6L:Pvv8PBRPmTVDt6/d3WG14RqCjt0IUGjs","tlshash":"6c321a047977c9f9c6b784b5b8415510f238bfeee56bc85ab3fd890a17ced390a06260","first_seen":"2026-05-26T16:34:37.700108Z","last_seen":"2026-05-26T16:34:37.700108Z","times_seen":1,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/trading-interface-YvFbDJGl.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/trading-interface-YvFbDJGl.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-6dddc\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s15fvQNn7RkhMrlz4cyBHtn2%2Bl5odzF8%2FdSjnbRwRPfD6TOzGVjAx2SopJma0RswJQjLg8VM9qb%2FycwS4Zpbzq0g67WsYHs7oliHOhLOlYXaW0nPEgCtCix5mifqBlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f728c1eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":450012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1199 x 769, 8-bit/color RGBA, non-interlaced","md5":"8e164653c295a947f0f5f890ace31218","sha1":"ad2b0b6fea992e6c58813ef2bfb054c4bf219343","sha256":"5414a7098f38784b19949671f3764c769fc9ec1cfa53445f6a083c70d40ed42a","sha512":"64866ba82d827f979ab4a565b85993384d54208092322810905b79b8ff869154c051aa081c69a074e16caf93644220f4fdf93108c9ac94d0be84c5d64f1397ce","ssdeep":"12288:z5/ZEt409LPsiceDij3a44IuvoHZt0JAyKsvX4UCQFX6CKb:z0t39Uic4w3aVIuAHZtOKI4VWX6Rb","tlshash":"b5a423d46a8c52d4420fa54146bebca35e188bbeb733e140d4ce90968f89b71462d6ff","first_seen":"2025-11-30T14:17:39.784095Z","last_seen":"2026-07-23T14:02:29.857095Z","times_seen":125,"resource_available":false,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":639,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/assets/index-bg2-DH3H8kTp.png","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:05.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /assets/index-bg2-DH3H8kTp.png HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-415bf\"\r\nexpires: Thu, 25 Jun 2026 16:34:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq7zEdm7n40qiIetm5oTAvdF2Iqae2SwiSkKqvIleJd3wkmo099Xd6J7%2FFhs6j1TiKeOwt%2F6lbGGlmplVNJcSArMhtePUqvU0v9GgCaVDkEVr2216RUcPUdxfbIzmgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f731cfeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 734, 8-bit colormap, non-interlaced","md5":"4e2ceadc2a00a7055f2d30b675301f2a","sha1":"23544a569e9f2129980acabcdef51b8c225117dd","sha256":"0113b32c782902d3f6c16a832653c99172ac40d17a454ec621e4366ef56cc280","sha512":"3c70550b3a9821a4b962341fd0cf08bacdabfdebe7eaf65a77946211a78701d72c5a8e321e24bca94be9634c4af66deab691317d98709587f23b5efb556b3d5e","ssdeep":"6144:fHeZ8M1KxbmeW02HluhfdZ9de39D3Jly1ZBWIUL:fHeK9xTWVu5lul3JM1ZBWIUL","tlshash":"b344230c360554c3edf7d874b31cdbfadd9b3cbf249d8528a672a36a4aa502c15c99c0","first_seen":"2025-08-26T17:46:37.264725Z","last_seen":"2026-07-23T14:09:33.195534Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/login-bg-CtTnvaIr.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/login-bg-CtTnvaIr.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjaD0VKwgE3TuriwWW3Ug%2FFpcxlIzsGQ0%2FCfHgY9iQY66CLnzkTIy8eO9AXQi4hidZDYx1z7HaRZDPEzFO2pbrlE32p1%2BKjmk7Z7MEJrALCNgzlkpazjUkg6abupY14%3D\"}]}\r\netag: W/\"6a1448af-5b\"\r\ncontent-encoding: br\r\ncf-ray: a01e2f873aaab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ebba15b40c37ba856a79bc847a08e71a","sha1":"a720af2936ab6f1dad28220622a18f7d338d44db","sha256":"3ddd883a1fd935ffb81a11e0d1dc9628d053175968f0446aa533104a2283c93c","sha512":"3f5b2f086d745a7475029b4fd91f57a953bffe5215314fba804f6b2387b8bb6e8cc1471d83c33a2fb15b0ae511beaf36b1170b39568b433ba7e7738ce28a5894","ssdeep":"","tlshash":"a1b01201855e117a0594105d4781557012e5413c2e5483bce63d46649b1620a5c47e10","first_seen":"2025-08-26T17:46:37.227472Z","last_seen":"2026-07-23T14:09:33.214034Z","times_seen":212,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/SetFundForm.vue_vue_type_script_setup_true_lang-BMi24x5S.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/SetFundForm.vue_vue_type_script_setup_true_lang-BMi24x5S.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-a71\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj9nJ3QVnSZkF%2F2kdwqiCx9u6v%2BTrrgiOOcyy2Eh%2BhO30TA2wfVufYBYB5cWJzHrRWahRavYUB5YQLKY20iLJFq3nvRzGCI4BAnzdph%2Fi1HwV3s%2F9my7dbNUGkEoqhY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f876b39b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2673,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2672)","md5":"9785a0de4b53dd66ac140e76ddbf93a8","sha1":"79e256d287e0ebd41865e23a3b35de34b1361761","sha256":"72de69027727c18f8f049335d0941dc32e15a14ca02d682256f41e8b0bb47aa4","sha512":"ab1dac1b6791ed1cb8b21d5114f6c774ea88d84c508fcd15cb0798bd626f7f4f1ed20e847c028f6073f255b7a303ac9391e91cbad97957a74c9453b5e7869b62","ssdeep":"","tlshash":"8351540d24b2cfff26c3a238224e2164e0c87fcfd7309755b66d407226c99f53619a55","first_seen":"2026-05-26T16:34:37.748923Z","last_seen":"2026-05-26T16:34:37.748923Z","times_seen":1,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0d93b8d8c30e34b77afa3a8b564727fdc.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d93b8d8c30e34b77afa3a8b564727fdc.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35456\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FCE63A8353334B48E\r\nAccept-Ranges: bytes\r\nETag: \"1476DB13021F28F76DA2006A45212545\"\r\nLast-Modified: Sun, 20 Jul 2025 18:50:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3750828838912111142\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: FHbbEwIfKPdtogBqRSElRQ==\r\nx-oss-server-time: 19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 652 x 651, 8-bit/color RGBA, non-interlaced","md5":"1476db13021f28f76da2006a45212545","sha1":"962eccf056ae2b9eb897a76363d1e43b8b743b20","sha256":"19dc87469e25a55d506f1a3cecbbd7a88c1cd01392384adde04749642492bf5c","sha512":"81bebdcc1c8cf8b8317e2b9de11bed0a1bdbbb7f7a6900ded26e5df992c7bea42e63c7953c8325ede83f36b106bb3f4bae327052e4997b254b54c009e8e261d1","ssdeep":"768:oJG0313ZxRicxeP1cLUPbndgZ34d+HQbqi82jPipgLraZi5fLvBeCmCmCM:oJGuMcLU7Y34d+wBrimaZilNeFFL","tlshash":"30f2be05da91156253e0fe928e8b0f99ccae3c5b7c5f1a09478633eb20bb7dc5a4607d","first_seen":"2026-03-14T09:22:23.957816Z","last_seen":"2026-06-23T17:25:04.40344Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":812,"dns":1,"connect":271,"send":0,"wait":297,"receive":17,"ssl":545},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/virtual/file/LTC.png","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:06.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /virtual/file/LTC.png HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 26 May 2026 16:34:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 6A15CB7FAB67323137FA17C6\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Tue, 22 Oct 2024 11:42:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-12T17:51:56.953618Z","times_seen":896,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":266,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Register-BlAjFq12.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Register-BlAjFq12.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-47fe\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHF%2FSnqgZR%2B3kl6BoY1S6SG5XM9tYxlqp3dDKTmwd5jqCjOEHtI8R2I3oh182Iir3YkDa%2Fn2rcXuZyWciLrJw5WaZirc8f02a%2BG3NaQqaheeR2AmhQXISfDJAE543Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f873ac7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18430,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (18424)","md5":"5f3092a61d71533b7ee2c4710924f8d9","sha1":"972bc98e6eb1e27381e5444c34eb9550d5ded093","sha256":"8883686c56f91f2b59aa4e3d6ef5d3cb24e821b988aa2f57418354b02d8328c3","sha512":"787ad827b19603e974704ce382914452a072889d460dcf44ee9f1645732fca0b14ce48fa33a819cbcf055ccfa93a64652b9a096d4f0cce337ebfc541517f309a","ssdeep":"384:GND6uozyk7mm+rwmee5dk5LY5IWajEJRq0g/Zk4Ltb2pVjkOymm+AR6eb0mm792q:GNDpoek7aF5i5M5tUZ5pyVjnjXYn0D91","tlshash":"0682678cb1519bfaab7b9430f4476930682c4f5fc463c0f6e6e88c35a79ec71a51423a","first_seen":"2026-05-26T16:34:37.714415Z","last_seen":"2026-05-26T16:34:37.714415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiinvest.net/js/Login-D1bcTUId.js","fqdn":"aiinvest.net","domain":"aiinvest.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiinvest.net/","date":"2026-05-26T16:34:09.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiinvest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 15:49:41 GMT","end":"Tue, 04 Aug 2026 16:46:59 GMT"},"fingerprint":{"sha1":"98:13:90:2F:DD:5D:54:07:54:82:5B:54:F2:D1:6D:B7:0B:43:D0:0C","sha256":"D1:DE:E0:8B:93:3E:B1:F3:81:D5:60:93:2B:C3:EC:CE:FE:7C:A5:A3:BB:B0:F1:E2:73:CC:22:9E:A0:DC:7E:A3"}}},"request":{"raw":"GET /js/Login-D1bcTUId.js HTTP/1.1\r\nHost: aiinvest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 26 May 2026 16:34:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 25 May 2026 13:03:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1448af-2d2b\"\r\nexpires: Wed, 27 May 2026 04:34:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZinFBIXxYm0nBwFrq8xtShzd8Q1b6AVG8ox%2Fcy%2F2TZRJuX1vKkn4J4wSNXqOfOyqNc1KYyQdos8VqMkAlG9H133O9Ms5Zb%2FXzHtGfox1dKNf98to9doFhS7xxkNupMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a01e2f8a8f28b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11563,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11556)","md5":"de38b3b780bc40ee7b5915a114ff02ee","sha1":"b0f995e540c3dc87e5b9c3bb6f02e3fc7380af74","sha256":"0b71c88c273767a77adf6b12fb719073d763aeff5ffe23e00e8f0eb4bae7da19","sha512":"38a8138875d1f820161f19f56c3668a69197ac873b899711f889fbd7eb4a1cefdacb7557c354e1edf2bb9c83868c0f04689aaab5ea3db465f31f908d930b76da","ssdeep":"192:5MTu/YQNzN+dNWNTpknH3caQKkn3ELqKDN/5qxBy+d7PEwjNwzPZdasQWQ5QUgXx:5jYQJIUBoL1Ibp9JyisQWQ5QbDFHiq7H","tlshash":"5732b6c8b511abf99bb30825b6047935b4185f99c067c48ef3f84c317bcacb66a24339","first_seen":"2026-05-26T16:34:37.685565Z","last_seen":"2026-05-26T16:34:37.685565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"aiinvest.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}