{"report_id":"70969013-a9dc-4b4e-94d0-c92970fba20e","version":6,"status":"done","tags":[],"date":"2026-01-07T13:24:14Z","url":{"schema":"https","addr":"primevestvisions.com/","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"primevestvisions.com/","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"title":"Primevestvisions|| Investment solutions designed with elegance and finesse","dom":{"size":42459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27328)","md5":"9c004d606220228c14b3916f4f3b73b5","sha1":"249d5346476e9f2656cf29407f7ab495bed12102","sha256":"4a103dbcb222106850e0ee53ea5cd78d7f8291cfa56b6ba6975a98b0c7bcb29f","sha512":"ed57328e7a1f214c7e6c5452794ff52e38440dc74a0ae2c2e5c30b8992cf95b2dd0fb16bcecee6a15ee112330aff67950a71530180c76fe2b0e32340172b6d45","ssdeep":"768:4j+8FYTbfsTQ+YDGDPKHs9TvfqaSQXOQGMWYWf:4j+8FYTbfsTQ+YDWPKHshqa/XOnrf","tlshash":"101396176780462c9c5392a8f399e54ea32df694ef6359eef7c62410c2c93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"primevestvisions.com/","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T13:24:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"primevestvisions.com","ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":182,"request_count":91,"received_data":5535593,"sent_data":108492,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-01-06T04:12:46.264526Z","alert_count":0,"request_count":3,"received_data":309868,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":1548,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":95334,"sent_data":1096,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-01-06T04:12:31.51053Z","alert_count":0,"request_count":1,"received_data":18645,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-01-07T00:00:10.453034Z","alert_count":0,"request_count":1,"received_data":1603,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"35.157.84.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-01-05T22:50:34.537427Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":609,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-01-05T11:34:19.348683Z","alert_count":0,"request_count":1,"received_data":7545,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.mb.YTPlayer.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b557a117a3632b5d81f596014f5aed6e","sha1":"29ae6394712b0988976b4f4b5b547c4e6784102a","sha256":"a7611724b2b8c3e84b557184d904247794c9cb94200c279842ad3c914e096cb8","sha512":"ad5171eef5e0555f1c9a01bb46c64d43af0234167b18bdf14d897a180560977890892c2db838d3784d4611280f482c24127fe28c5272b25675bb36cddec9b062","ssdeep":"768:4KNsVqea1TjiR2OnOl5aLc1tnpaAaVAupnz/D9G7BC:Z0q9ljiR2OnY5aLcTnAXeyzJWBC","tlshash":"3d53c80aa55cf0ae467201a5b076832c72394b51d3eb9269f047f69de40a65f703fbbc","size":64021,"data":"","first_seen":"2023-03-07T14:24:04Z","last_seen":"2026-06-08T08:29:57.567737Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/ScrollTrigger.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56637c51ac3a407db6f8fd1825a85bf6","sha1":"4022400b5f6e803e820ca90537706762b758ab6e","sha256":"b2c91f2fe9ae2e66d202e08851e24196a8aa37bd6762297b67e3e5602070ae15","sha512":"4a6ffb6ac34c0a3a4dfe4a9e358f884951f098e39fa8c5a4380527db3253b72673e1d0f1da539e278872f2ada24b9ae360594f42d3142cc06366384fb3535cc7","ssdeep":"384:0SAHRd3dYuIUvLVfxq4YT7HAYxwvYf+CgdKQbAmyaE0:0SEtvLVKUvu+NwMh","tlshash":"ae7208ce7245b062279f6235a05f414ab33a009c6a0f0564f364e8e47db92bd972ff9d","size":16155,"data":"","first_seen":"2024-08-19T13:02:28.509814Z","last_seen":"2026-06-08T08:29:57.574775Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.waypoints.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9028,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-06-08T18:41:44.357053Z","times_seen":16556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.slicknav.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0008e3e21feedb76a988c5bfc77a2d66","sha1":"795e74dbb3c9da66a93390f551e28907297f5ef0","sha256":"0fe8db6c623ba2bff4fdb7884ebedb8a705415cb2cc50000f540aa4046e0de11","sha512":"31c8741b8c8c942cca51c8e4c7f1ae6edaee1e5af70f5fbbee259fc57b65739f2151dcb7f059144a12f2a43edfa01827cca39d890b915462b567e61e28316674","ssdeep":"384:4EtkdkmXj5GV9cjc4UYkkcx82+hOHr1mp3NRUBw:RtfmXjvg4UYkkcu2788w","tlshash":"4792521971ab2ab650b736bd8baf44003233802b541aed657dae43c45f5162c26f3bfd","size":21081,"data":"","first_seen":"2024-12-29T00:41:48.299058Z","last_seen":"2026-06-08T08:29:57.522783Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/wow.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bc8a4b55897e0336d7a85e574a03f70","sha1":"bd3d97645e7ac04d11ae47b6a3219097fa5b82c5","sha256":"a52b5f02950a990452a9e4e1db79dacd5973b1d2e2ec0837da80aac6663d197e","sha512":"e1abca3e07a2c5e5180a96ccf14a39f44cdf17608518c14cbb795ba8019e9787f9e706dd789053ff7d60ed44a720dbe1effc0a1d7404c4f970a257a7f0073961","ssdeep":"192:iF0VXSXMk/JCpC22iNVGHOFqWjJbY4JGe3dSDpKJCpyJYsduDjgXiJKQtG0h:dxAMgoCPiNguv1kEfdSDpnaYsdudgah","tlshash":"c272ff893a5a31618737b37ecf5f8108fb39166f11551158be9c8ae41f7092482eaff8","size":16064,"data":"","first_seen":"2023-03-12T22:55:18Z","last_seen":"2026-06-08T08:29:57.529302Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-06-08T07:14:05.856774Z","times_seen":9276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/validator.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"580f0e3e78da72a6a5b66ac8998bbbf9","sha1":"0d92104fae1e3aad1b518d2261c9b80b7cc41720","sha256":"7477ff6231f5038b5ec04b0a51298d9d5d390c36df18dde0ecd32af3ac601a1f","sha512":"753bb4bc9b399ddaddde43f09d88b1bce0acbde7f9486616ff34922b86dc8d105c647cea4e1abba6decf982bf9e726fc881be78b44d27880d5f1160a8d92f7e8","ssdeep":"192:CAGMLmHTNFuBv+Hr72dmDdY9clcNkfeL33tO8TRORIz3BMyVkJ:CAbyHTNOv+LKdmDaOlcafeL33tO8TROD","tlshash":"c1f12349776220922f9220f4519b824b72793b69c50a409874ed85f1a9f8f84b7f7f3c","size":7729,"data":"","first_seen":"2023-03-07T13:14:54Z","last_seen":"2026-06-08T15:33:17.315068Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/function.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d3e056f5e7e1f0f11ae85b8b877398f","sha1":"5f2b99b1b323b2edf471fd90aff30bddfad653a0","sha256":"7541800df82c90f3a02759a9d5d7f5c97fc44dcc9a454e8e693bca394ccca635","sha512":"9b39a54a0144cec9ac53e022865d1e2ec32389ff7601e599571649ffe3236d9ed57b0721bec38cece75f2a8b4f54163a5ac907203ab2d49dee634fbcd64cec15","ssdeep":"96:8QiCnPQusiPQK6wsmPQmV8soqkPQKbSZWtIEIV/gDKoJaGk8yo9ChcPQpesrWQ/s:F0wSfSZtoDKoJaGk8yo9CW+1+","tlshash":"59f17640e32c20a14a3b666d9dbe53c3552c022298568cbbfcee847d5bdd93e2199b74","size":7579,"data":"","first_seen":"2025-06-29T02:39:34.344487Z","last_seen":"2026-06-08T08:27:44.859584Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/swiper-bundle.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"badf0c9a17e4ab4acda01efa093bf952","sha1":"843d93a0ed6f33fd41b994f58c44f4b12b4deedb","sha256":"9d88c5fa4d423f2a99f0f5f9d9263624f36c80e7a50f5e7c4bd45a93332ccf4d","sha512":"e46bf4b6689b0cd8618a210c7ceed9c09ea2ca409b5843d46c17959ddb1dbbe81abc1b978dfaccecb6dac840b511fb1bc1aeb7ab73bc777dd1bf36f0de691df6","ssdeep":"1536:TKJNfGmhnDcu8N4zeS3339a/BlxvHR7tky+j5N08Ufj0SaBDIvkAygTwwcc3AbSR:GJD0Nhos7tkyuBDVAygUg3KS6lfed","tlshash":"e7e3e889a221b57646e316db93e4c261b3b54500b80ac4f470bd4c9f597ec9813feefa","size":148486,"data":"","first_seen":"2024-05-29T00:14:04Z","last_seen":"2026-06-08T08:29:57.527595Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/SmoothScroll.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e501b30be0e9a13e61a94f9c6ba6bef5","sha1":"9538eebb191cfb654e730146c6081b832a54833d","sha256":"03f70af99632d66f88e05d4a1b353069d977955447951b00627ced36dfdacb8c","sha512":"c8dd3107169e24c726ff528482df0e7c30f276f29951236299220d0243b1eedd0c0dbceda472c5becb5f4b93992acdcac3a2c89c66fc1e0273483f3fb9ffd7f0","ssdeep":"384:ahtB3DPRPstk034JMa4I78RwuoVaoQZ28GAGdlFv9V/TI4CFRWz6A:a7B+k0lS8RLoVKs3NXlDsNsz3","tlshash":"95a2a39955e32c6116af613e975f92c673744053120add25380ebfa82f8cb7443b2fea","size":23366,"data":"","first_seen":"2023-03-07T12:59:33Z","last_seen":"2026-06-08T08:29:57.503139Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/splitType.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f45652344dc5a39c46c658464c298b2b","sha1":"c9b75320b7751bc5e46105756f971ad7340f2387","sha256":"13b5cba4d6689a129e2254cb72e6511922f26a15e0d9c10ea1c0e374d625db96","sha512":"c7c8ce6342011f3ccf29c7ade59ca3673ee3c6f2b6d6f6a94ca49dbce6d2e5c27528bddf5e98b732da8f86eb50d228311c46e635e85358fe41a5c3a227c8a9af","ssdeep":"192:KZ4ZgkQoOfxUCpCOCpgYsv65SRxcqL1a1gkXQsksbEy/iFXGvy5P6rhZNaSQvukW:KCZlCVCLsC5+Va1cmU2vyR68S3gR3/Zi","tlshash":"5232e848b2a7b5a196561028817f530ff235702aa55bc450f177fcf46c34caf62a3e39","size":11812,"data":"","first_seen":"2024-12-14T22:12:11.515454Z","last_seen":"2026-06-08T08:27:44.872542Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc7cafa10f01c204f6aed80260f414f0","sha1":"c75f1be7361b6ddbe79b2fce73332885c10d5d08","sha256":"aeab82d000149ddebf914cd6cb4a3d0b29828167809813051ec7903c499e744b","sha512":"1b0e58fe85006474f86c8d98cae3570404c1b91b0b039629d2a196bf6b1d6053a42beffdef2664369eb718fbff32493e58fcece76eb04ce8f8249776320d93db","ssdeep":"","tlshash":"7ce02b3d3c35419a87a212b5c1bae2283a1630648445d957d49698695cf0fcd6e01594","size":418,"data":"","first_seen":"2026-01-07T13:24:26.409116Z","last_seen":"2026-01-07T13:24:26.409116Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.counterup.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f715449c966d4cd0af405211f67f59e","sha1":"3b272fb0026ee40755abff4e82a78531408b3fc2","sha256":"a70feaa15f50b1f24266250a1415014bfbc73f4037370f15619e87b2cfc6d94d","sha512":"21b4abd78bd23a7b24ca48500f05438cfad1fc84606d918d11fa1d94ce8a2ffefdb034e0cd51ac25758aae1928f8914f8f9be146ae7fdf7967ac9498879ba949","ssdeep":"","tlshash":"1b118cb9790b688d7611f46db2bfb4589032bdbc4841584a70c941802f95b3e3b53774","size":1057,"data":"","first_seen":"2024-12-29T00:41:48.302218Z","last_seen":"2026-06-08T08:29:57.517282Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/parallaxie.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a97352192cc0508c4f058de99ccf5b6","sha1":"8e46bfe8042e030867cc3990480a9b29a435ddd6","sha256":"cdcd31326b36cc8381111429ca1ea11bd3174c517516a21baf4440082abe9077","sha512":"094662ee18b850e32fb9893c57e940c6f00caaa3922b7bb83275d90451cbee7f4f6318146c71f546c70562934d7855bd42bbf2fa52fc540ef86381896625980e","ssdeep":"","tlshash":"3f419bc06413920b76fbd5e58f7e0900d23ac2171148aa1bbb3e62d96fb052c85c3ee4","size":2072,"data":"","first_seen":"2024-12-29T00:41:48.311446Z","last_seen":"2026-06-08T08:29:57.514088Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery-3.7.1.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-08T19:06:55.429094Z","times_seen":27598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/bootstrap.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60577,"data":"","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-06-08T08:27:44.879154Z","times_seen":2021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/gsap.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f2b3bdb990fbf8053a7343d4581b52b","sha1":"9813ff98206439c4b46e9c6789392f2a541daca5","sha256":"f6d6ecb1737ecfa9ec03e37591b8feca3b47676e69348c2e586a983a94ea109b","sha512":"5313fe52125a1915ae306d980ba2cf598a45427b12827a2bd15505dc11dd0fcdcf4bfa4ea4df8561b666ad837e2125fc8e7be0554722a8ffdf20b3970e3652c2","ssdeep":"768:c9pO+E+whCj8pYi+rOyweRxFhP3obX5/F1Chvzc+CUmxCQ8fDF9z0cQIasB046/L:cTOV+spKOcPqDJaBmh94MTL","tlshash":"9353facd3192f42342965160447f0a4bb33be958640f0918f2a9e4cd7d3c9ae42bbe7a","size":63403,"data":"","first_seen":"2023-03-07T12:11:10Z","last_seen":"2026-06-08T08:29:57.618282Z","times_seen":1305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","size":269534,"data":"","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.magnific-popup.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T19:24:19.585534Z","times_seen":66422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/magiccursor.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60b10e8c7b2b640649b36a0f3c3daeda","sha1":"24dd381fd632fc4f5738fa6ef1b08594df705fbe","sha256":"18e6459a0fa9e00b4270e0d4d80d3ff2d102d02bd4ba0950017d976e0a8a12b7","sha512":"c8318d61bb9c72337b96220f7184c1f21d2de6d9bf8d49028e3646f3cbc22af414b4965766655575d6ef66261936bffb83f71528e6ca196d3bd4610c2f87b76d","ssdeep":"192:m8bpFp1yGkLRVxG0kmVDHDHWBH0HeHpuPJ7jHyRLPeTKK0csA7Kac:m8dFpy9W27eucdN","tlshash":"b472024fb149309588b3b36b5e66d40ded368823e2078f407ead36504f7a548d672f79","size":17047,"data":"","first_seen":"2024-12-29T00:41:48.243539Z","last_seen":"2026-06-08T08:27:44.883075Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/video-bg.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/video-bg.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 145211\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1300 x 903, 8-bit/color RGBA, non-interlaced","md5":"d7b3a04e650572151347d5bb81cc754e","sha1":"e063fa2c4e7b0302c5ba3d619bd11c724d163d40","sha256":"636f0e32eff3569bf6baba2872d47eeeef38e288de55bfad70cc94b573d81b57","sha512":"63f292c22c4b3ca981f2f1aba19a20c42a27266ce18b0e079d40cdae74dde7898da1f7b754316405f1b4853633fb9897ac5c21f787ef78cd3d5e35ebbeb66a8c","ssdeep":"3072:j9EYNypx2fapg2iwQCvLHZ66Xd4dlBKz+4WGuBVYrhmCB:j9NuIpNct66MKz+V/VubB","tlshash":"d8e3021dc59be4bdfa2d237e5c5e8ec960f13d28122113ba107f6039b64d558e43ad2e","first_seen":"2025-06-29T01:18:34.045337Z","last_seen":"2026-05-06T13:22:59.154155Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/team-3.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/team-3.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 495495\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":495495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 930, 8-bit/color RGBA, non-interlaced","md5":"a4dcb0aa41aee3e19a64198e5381aaa3","sha1":"cc69c38d5d1a0d29d4f91bbe7bb499054a65c690","sha256":"6fa07f2c550751998f5eec4cf2e8fdf1afcd629bd41be5b041905227ca6b1381","sha512":"4db7cf87a0eb6fd2e707c7600022ac9cdba3dddb96168c3652f0ae89366dd03474e441156b7090b713ae3b017df72ed7029c1ffd2287de68a4937ce80b36d08c","ssdeep":"12288:a7UGxreU8sMI8ZnDI6rhpVApC+5YNwNGkTnq1bPHGV+h:g3opXZnDIOh4JWnkqJHp","tlshash":"f8b42326ddf6ea971fc7d666aad0083026de35e12234bfe514fb47018267c621cc2f66","first_seen":"2025-07-31T07:24:41.530482Z","last_seen":"2026-05-06T13:22:59.143463Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1127,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/magiccursor.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/magiccursor.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2581\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17047,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"60b10e8c7b2b640649b36a0f3c3daeda","sha1":"24dd381fd632fc4f5738fa6ef1b08594df705fbe","sha256":"18e6459a0fa9e00b4270e0d4d80d3ff2d102d02bd4ba0950017d976e0a8a12b7","sha512":"c8318d61bb9c72337b96220f7184c1f21d2de6d9bf8d49028e3646f3cbc22af414b4965766655575d6ef66261936bffb83f71528e6ca196d3bd4610c2f87b76d","ssdeep":"192:m8bpFp1yGkLRVxG0kmVDHDHWBH0HeHpuPJ7jHyRLPeTKK0csA7Kac:m8dFpy9W27eucdN","tlshash":"b472024fb149309588b3b36b5e66d40ded368823e2078f407ead36504f7a548d672f79","first_seen":"2024-12-29T00:41:48.243539Z","last_seen":"2026-06-08T08:27:44.883075Z","times_seen":66,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-C69Zid5j.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/style-C69Zid5j.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:57 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68f60ab9-8f9a\"\r\nexpires: Tue, 20 Oct 2026 10:14:33 GMT\r\nlast-modified: Mon, 20 Oct 2025 10:11:05 GMT\r\nx-77-nzt: EwwBuUwJGwH30lJoAAwBuUwKEwH3EgAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb541238c119c576d5e5e6974894e1c\r\nx-77-cache: HIT\r\nx-77-age: 6836946\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36761)","md5":"7e896f506ee5b96cde339ba33f8593d0","sha1":"63a333eecbd0975faf126844168040c7d87da274","sha256":"6995412d91a42aef46fe8e139774aa00988bb18028a15bac2feb7c15ac28a623","sha512":"dcea6a83bbac485b50a9180be076e3fb6616545fbef0d3e531cbd998c9183d001f5c28ced200ca860bf5204d060971fb6678e6c079559b8353ac383ac1c97b0c","ssdeep":"768:E8H95TcrWYtvcXFOxrnSJPHs24v9+ggFgZ:E8d5TcrWYtkXIuPF4g2Z","tlshash":"2bf2975daad5093cec33c166e3f8e18c9629e5d1df321adaf64339048ac27bf1987514","first_seen":"2025-10-20T10:59:25.0177Z","last_seen":"2026-01-13T13:06:51.378879Z","times_seen":3895,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-7.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-7.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2538\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98df51c200b7ee7d5921be9e722b843b","sha1":"e44cf37702972db8ce09cdf11bb70b590979add0","sha256":"8c4e64877f444b94538b329bd8e40da93da821c9765546cfbab9e911faf702eb","sha512":"f11f757b44eac1477e5156fd09d23ef5dab10a5e0b71efa44084b5a04551335421bc6cf3a67180c12145056a62248b81907ab6370c2e89c4dcc4e62b40034ae4","ssdeep":"96:6VjUoGUkj7uYLFV5D7r93zBtsUbNeLZ7g6oImKIY+Yy/2rce9awnb8oo:6FUoUj5L17tzt6ZxXIY+Yyurxawnby","tlshash":"6fb1c6d693e9a2e47006e7f0d972d9397b5716f63b22ca1c43a05de1e71309d48a5cc3","first_seen":"2025-06-29T01:18:34.014862Z","last_seen":"2026-05-06T13:22:59.183462Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-how-it-work-2.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-how-it-work-2.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3770\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0357b931ffdfb0a8e7add1baf0e4765","sha1":"ca6894daf48055cef50aa31c7661290ecd50a64c","sha256":"5e1a7a04749402f245e2daa49bb9db024f707c24e5aeca8f8bb2339099dc96d8","sha512":"40b2ba7d346fe696ac3954ea3621d8165c84f46fbedf2c5d67e1f6d07398cbb93310717ed31dfe78701e2f94a10519b24fe780a6eeca328cfa9148b79e16f978","ssdeep":"192:7DpWQLLSgq3cwOj3xRpSjXpAIsJd1/wfBN5ZUE5r2fD66PPyK4SeEY0sVM:7D8Qf1wO8ZAFJdifBNbQf+6X4TEY0sVM","tlshash":"281295d0a3bbe3b9f211f6bc492278352e572caa2e1248b4c3b71d20dd8545dd7898d7","first_seen":"2025-06-29T01:18:33.91179Z","last_seen":"2026-05-06T13:22:59.174888Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-4.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-4.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4081\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11567,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae24568d32bc87e040f2afaca64084f2","sha1":"2a0a37ce08700b37e46fb3a72162ec6369857821","sha256":"f562d2e16da2adc1382146ca4fb875d08ce326934d0e0dda4ac5f6ada1221a6b","sha512":"3a5592151671ca044fae5f84a4c5fa6b537f235b8183c7ea100cbd78c0758efc90a2ea5f84df9f7e8299e8abd57fd43cf19f84785714c5dde04e123e52dd04d6","ssdeep":"192:duGTJqRodWn19ixDsOrQnmkkbWu0W8n/VY0tSNtxXRug6pwqtg6pxtSNtxXRwqG:t9WKWn19ijG8Wu+/O0tSWg6OWg6rtS4N","tlshash":"d732b5d037f5a3f8f102f7fd4122a460ba1728fa7bb1d262c3728e11955205d5ea98e7","first_seen":"2025-06-29T01:18:33.985546Z","last_seen":"2026-05-06T13:22:59.203472Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-17.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-17.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 232\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":437,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd8e41bd578103c83d34b90aa0d27871","sha1":"22a7f91c09691598196b01ba537affef6c7d00ff","sha256":"801930ea7ce154848d6738383d133ef1ff08a908c198e840ef3ed2c8230971be","sha512":"9eb10bced600c7d988eb29f7e521f3a2955ada6264468576ce2363c000aed0e417baef85fd310d86c95bdaca010d39d81a099986ff7ba9456a499c0c1b5dcf56","ssdeep":"","tlshash":"aee02b26e18d4998670c130e07146cff92a690d95677c2fbd4da3e27f4c74ee2c90ad9","first_seen":"2025-06-29T01:18:34.052573Z","last_seen":"2026-05-06T13:22:59.128276Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-4.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-4.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 561\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37151efe8d95a58dc102f5f80f186547","sha1":"1c91821a14a14322861cf5d71a422a632815e25c","sha256":"24d88cf67cd4393d50e1161b1657855842f1bdc08390d126fad53c34ab7b5824","sha512":"c6999f3bc339823519a79cee5958d1649cceac0b4f2f5a95bf8bdb76f79be404d8e65c8e2774edd717cf2876b061f6cadef3724eaa9596aa25483127a072e988","ssdeep":"","tlshash":"f121bbaa114109e2d4082b70c35d70b2ba2f3cf47668cb4ce1c10f57e6a655d986dec1","first_seen":"2025-06-29T01:18:33.999049Z","last_seen":"2026-05-06T13:22:59.139923Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-why-choose-us-3.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-why-choose-us-3.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1196\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2926,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7925757b277dbf2d4a91bc5d7f400435","sha1":"84053d5296f07f2607ae28eaa73e3d0187ec04e6","sha256":"8b13fd8082e35a00873bda7be4dd0dcc681328666e7bebab880af6b70da11aa5","sha512":"60fed2651a803ff26873c30bc2a8d1232463c854cd443e04ccdbe4f5b106e422edbe8b4ca688e5c3e454c8c4a03d8c9df22420f56305c945fee509754ea13f03","ssdeep":"","tlshash":"4b5122fc0390a1f8ea0df3f9c822a97a771b78b67b838a45c49869c5a56119c4dc80d5","first_seen":"2025-06-29T01:18:34.05124Z","last_seen":"2026-05-06T13:22:59.223776Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.magnific-popup.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7043\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T19:24:19.585534Z","times_seen":66422,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/ScrollTrigger.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/ScrollTrigger.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7050\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840), with CRLF line terminators","md5":"56637c51ac3a407db6f8fd1825a85bf6","sha1":"4022400b5f6e803e820ca90537706762b758ab6e","sha256":"b2c91f2fe9ae2e66d202e08851e24196a8aa37bd6762297b67e3e5602070ae15","sha512":"4a6ffb6ac34c0a3a4dfe4a9e358f884951f098e39fa8c5a4380527db3253b72673e1d0f1da539e278872f2ada24b9ae360594f42d3142cc06366384fb3535cc7","ssdeep":"384:0SAHRd3dYuIUvLVfxq4YT7HAYxwvYf+CgdKQbAmyaE0:0SEtvLVKUvu+NwMh","tlshash":"ae7208ce7245b062279f6235a05f414ab33a009c6a0f0564f364e8e47db92bd972ff9d","first_seen":"2024-08-19T13:02:28.509814Z","last_seen":"2026-06-08T08:29:57.574775Z","times_seen":602,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/crypto-calculator-bg.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/crypto-calculator-bg.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75593\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1300 x 411, 8-bit/color RGBA, non-interlaced","md5":"9d32533537fa08dcdf9432e22203ed1b","sha1":"2d48e043362c5d5ab6ccd5ebce6f96ddc906543c","sha256":"0dea88733c55bda2505e9617ab5e347871b901f9db2a787df2a7e6b22f89ad06","sha512":"a5c8f52eac786e3051a280bf44768c0744de83fa89e9230896090671b41bece198528552318679a5f710d2f2937920df418245740532a1be0e87ee95878519c7","ssdeep":"1536:NbgrwTEl+YgN2LgrZl+gbtow7MbDs4otyn/srn94WQufUK:NAoElOA0r7+gbG7XDWQuff","tlshash":"fc73025a7b8622fe5137d9b230a352c9a7c6031a37a35c0d7119bc726f9d30a0da0dbd","first_seen":"2025-07-31T07:24:41.63393Z","last_seen":"2026-05-06T13:22:59.198253Z","times_seen":24,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-1.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-1.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 771\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f624402cd5a1c47d64ac144c800127f","sha1":"53a89e097202e8d221ddebbd91c00bdb3ec8d4b4","sha256":"8e1f75dcd0179820adbbe0694d4d310895cc925e2ed29177b5c68da1bf00da07","sha512":"e6dd5a07f30aeb06ccc83ae1a882c8b0047510cd69e71f19b6d6c34176f5e00674cf0f219a8d6ead0a4ab2cfa0cc663b837ae6a0dd219397ef1e6c370d94eed9","ssdeep":"","tlshash":"0c3153f6e3c8a5e1f54993b0520ee874b52b34f97f228b1806991d02e79301f0819c92","first_seen":"2025-06-29T01:18:34.049775Z","last_seen":"2026-05-06T13:22:59.174108Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-1.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-1.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3939\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f0bdfb762b7d320740d5cd5647098b5","sha1":"5417b5cf6312daa908a6a6d8be30b181d780b86f","sha256":"8fcc70f9e9a11ec2037d665c0b4a7ee85d061a97c5047122aa422224e4ead619","sha512":"1454f3fd341d2335bf6e6f584156e6f4db9ed9fb2a9d9ebc99aaf101609237221840d36422daa5df3b4b45ce1b6f563ff0ac916f7e43b72fc1eb103359948118","ssdeep":"192:NdMPsncPjxEyCAjwjQET/+IKSs+aTlHNLfnyGs54:NOPdFdkss/+OsvPLXZ","tlshash":"e612a2c173b9a3fcf005f7b8852794a17eaa28e527408565c7922d41e58109c8de9ddb","first_seen":"2024-11-14T11:05:18.584683Z","last_seen":"2026-05-06T13:22:59.176051Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-19.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-19.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 624\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d07be03b38357ead0ce99efebc4f463","sha1":"2eb4df63308e2e35c9600b05685d26f081a5a94f","sha256":"841a9e3dd1319d810edc75d6e220cd82dd9979bbd23871904e0229a987f8203e","sha512":"ab7f0093602e0e024aa6c279a38bc277b7fe134f39186891a2cca4e08b98403e18cfe7cfff61ccfe332b3e8cdcd99bd068618426a8c5e5bae607adbdf1ebef88","ssdeep":"","tlshash":"363110c05324a7cead48ab78cb59a1f4b861bce09b2050d0d2b97e18b00a0fd5cdcde3","first_seen":"2025-06-29T01:18:33.900996Z","last_seen":"2026-05-06T13:22:59.200931Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-stay-info.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-stay-info.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4171\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16bdb9839fc0350e2ef86b223223a3ff","sha1":"3d044da70974d989317527ca8ba0f702f920dde2","sha256":"0f86b111d343b17baf19df9d94b9e767f7aa10b0b0a496b87c99e71de9280512","sha512":"31e37916d755330a630423e97240f3ad7838363ca8087c69c092d5c986702b073ac532a3c2834e441e071affb7fafa1ea3302b5822c9a1698cb861f19836b710","ssdeep":"192:6fGjRwKX62CTvpIpWmBnf/H6fbdx9JXIk6r:6fGwKKXBIpWWf/oblB6r","tlshash":"2012b8e96398e2e0f805f7f4ce1398b63e5b28f77a22c28483d46d55e54156c8d98ce3","first_seen":"2025-06-29T01:18:33.958746Z","last_seen":"2026-05-06T13:22:59.212956Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-9.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-9.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36054\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d5dcffe1fad03c91c319c21ad8f3a4b","sha1":"4ab0aa5492f016568be1a97ec5e91bd71c30f746","sha256":"09ff04f0619a98bba4a891612fcdeca23a82df0cacdb10403c3baa463e6e1634","sha512":"917879ba86e81e82ea48645d2218b03e21ee147e061938285e4f9cf51fedcd8c9c2f224bbfe721dda3e881b1b018304f0bd0cf9242e11ac43e9695095fe955ac","ssdeep":"768:6i7IqL0DSM+gKzjd0i7zaJLcq2nEYjnnh/s6PXw+jZwxwh6xmxsvB746QvuxY4IN:ZUWzpaujKsXw1wh9zQIXh4fScqJYBh0","tlshash":"fc9376f6a3d4b2d0e407e7f4c62a95b27a6738fe3b25cb5903e46d94ea1116d848ccc1","first_seen":"2025-06-29T01:18:34.008294Z","last_seen":"2026-05-06T13:22:59.131446Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/about-us-2.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/about-us-2.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168082\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 302x387, components 3","md5":"1bf6fc59b443bc701c13256b4f6edce0","sha1":"4cc5d85d2a4d7ad0590572e737b2a51a71f01ff7","sha256":"200a1f5ccaf4a0d6c36c67e44064f877ea5c2ea5f0e2c6bc22e5d599dc26a754","sha512":"269643adcb95501c094f0f9aa3a5e3822947361344f469ea23f34b03cc7c06063f3c4414c60dda13fa215f395293a933a478b559e9e37715e2534a9025cd3604","ssdeep":"3072:vtcwzpgaFnMwph6rtlrgIItPyNzNC155K0rtb5y6KDVG5IEYrXNYfUQiHVM:vLxd7gHgftPyNzNC/5Ltb5y6KI5c9YfD","tlshash":"64f3237036e603ee951d26fa8d67018011e9578484fe80b5cb7016b6cbbd0d92adb7ee","first_seen":"2025-06-29T01:18:33.979301Z","last_seen":"2026-05-06T13:22:59.16598Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-5.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-5.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2249\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a2810c629b5571ed724b3d7102ba41d","sha1":"c8593bd3fefdd0bfc36fd1989f8c5f9b45f5a56f","sha256":"fe05ccca65d91de7c5259bc33b01fd1c9b1b45469c5ebdb5b5a5b371ca1f42ce","sha512":"68ec1aa88bf34e8f76b33c12b280dcd52be616989498ceb54ec93649879224d5a94f3ef1fe44bca2504b0dc12a00b54a1c109c6d60eebaf09afffe3069faba52","ssdeep":"96:aVDZDVTRXTaANFnCzDoPaBKT9NYjsrMBwKS9QyLdSr3HgsNltWN9vkWmrQC:axNVR/NwzDdjsrkwKS9JATBNHWNrLC","tlshash":"ebc163d873f8a3fde515f7aa6526e9a2799732fc72c1d918c7152e2077530ac1e808c1","first_seen":"2025-06-29T01:18:33.884838Z","last_seen":"2026-05-06T13:22:59.123972Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-21.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-21.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 645\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1371,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c6e6776b83d87b624291bce11c5c313","sha1":"4737483efc4c773bab2d66cd7692de1499434bf6","sha256":"6f579451ae083bb2921f5ed172b40cb15ab2ace83ac1441fb8c549dc0e41f25a","sha512":"2242fe993745b743ab0a08a7996aad528acf957ea3c81cfcdca8b01d8e373062c18d1e6633aefbf833a447907018366f462845a45339a20b8651b70dff7d3bb1","ssdeep":"","tlshash":"3021ce28277986fdb88887b41b054cb9146dadde78f3c18bd7c472d09a4352c5a62ce3","first_seen":"2025-06-29T01:18:34.054055Z","last_seen":"2026-05-06T13:22:59.169777Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-22.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-22.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 882\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa7035014a2ad1444c31ecfabc863ea5","sha1":"6713a18a44e7afa6b34268d812676a7353bf6e87","sha256":"b5150161a0b6cbd24cc174fd860cebf050f3041be94770120123f0182d74e931","sha512":"ca5b7c43d4181cd373c31b798605fe6291a93fe44332cab9dbcecad5a457e9d0139cf5ece6796c8c01a315fcfa78eaf3431d3d5e8d3e1ff3ec26f987b243698e","ssdeep":"","tlshash":"3a4166a8731ac3f8fc03b366dd64ea663a725cd37a291250c1ba590ca55042d4e69cc7","first_seen":"2025-06-29T01:18:34.043955Z","last_seen":"2026-05-06T13:22:59.171153Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-why-choose-us-2.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-why-choose-us-2.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3590\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f58d301858094a600deef9dc44cd625","sha1":"6ff93cd0340f03848c99b874a3b239836443bbc3","sha256":"5c06bf27d5817239a231925dbf9e7a3ead8133ccfa5cee3db7dd8a2ba2d41c97","sha512":"0ec0bfde44e4a6809ae7a16ec84700f2aab5640a70e44ca86c8397e1a98511f358103ea052f691ff21d3cb7d7640ba35b2c0d03ad18a012ac017bf65840365cd","ssdeep":"192:5pLjb0a5BjmA5lXAfWx0vzg0DDNrZ4KP3xawbzZNwM/d:TLEa/mA5lQ60h1Z4KP3xHzZNwM/d","tlshash":"f8f196d437b9e3f8f801f7fd422274b0fa5629d9b9a1c4a4c3b52d10e64509c4daa8d3","first_seen":"2025-06-29T01:18:34.031786Z","last_seen":"2026-05-06T13:22:59.211771Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-3.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-3.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20242\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:02:09 11:31:24], baseline, precision 8, 100x100, components 3","md5":"655a48df5182e4571cc249199d27e573","sha1":"a7bf397fcaf6b36619e3358d3e9d1202a1a7b34a","sha256":"095a57fce8afaf0c447033be3d6d6521a660dcfba2befdfbf13626cc3a824ce4","sha512":"137fea57a16176c646a3046850dbafce3fe9380cf1a6ba41d4941bdb97e7b2bad03558aba2e66d60b8d1dd3773ae0f5f9746910ab9e1e38ad29e9865509f6a5b","ssdeep":"384:10Px+PQ7iU0Px+EcnRsXbj0mE/YvuVPULZd6+LgWMxOq6OB:12kPQ7f2kEcRso/ZMLZd6+8WMcq5B","tlshash":"c1926b5abf038c02fad0727558b6d6ca0312ef9892d35a66bd4cb845bfb47925c8c247","first_seen":"2025-07-31T07:24:41.507754Z","last_seen":"2026-05-06T13:22:59.144793Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery-3.7.1.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29737\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-08T19:06:55.429094Z","times_seen":27598,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Jan 2026 13:23:55 GMT\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5fe8c4cfd4c3dca4388da3b63173c7ef","sha1":"d500a3e0c0c7f04f00a80e3a4940cda9e123e91e","sha256":"8eb1fcb8e3ae164ad576f8ea72c86654ac8700e94c8a3fa44cbf6211b0816413","sha512":"322e75e365d5342da7034506defbccc266b40756c44ab772d7669c201e5976da2ab8615c5f673c16fcb15ae7f8b2bf86fa3a579eb3f7a8add8f4bbd705fe663a","ssdeep":"","tlshash":"0611cc80086b7014e7531cc022cd7e32ef1fa09054549874bafe2888fc6ac6d5361b4d","first_seen":"2025-09-27T18:58:28.519868Z","last_seen":"2026-06-04T02:25:37.660758Z","times_seen":101,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":235,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/magnific-popup.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/magnific-popup.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1660\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-06-08T19:46:01.053977Z","times_seen":26287,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-14.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-14.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 293\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12208c58f83ed97707055a0c344b83c6","sha1":"df3bd61c3c15fd61bc58c2c8d91a6a42305d7098","sha256":"6b0ca87e57f738e5efdc7c859a5d1d057bf23b08d66a77fe2e0bd22e241d6cee","sha512":"3b52b4cf21a14a070afab382be0f2b64e5458aaa75e719476442eb9b864d38e0abb7fb3ed7827d7674e7c2044e83d157a44b3aec69796181015674bc9dac1687","ssdeep":"","tlshash":"57f0c06945d0d1fc80406720470d71b221aff0e0c5a34013f9c53a67ba8b0aeda77499","first_seen":"2025-06-29T01:18:33.910223Z","last_seen":"2026-05-06T13:22:59.126844Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/team-1.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/team-1.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 581627\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":581627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 930, 8-bit/color RGBA, non-interlaced","md5":"138f7311ffe3ab47159e28e79b7aa473","sha1":"19df772d536186bd9cccf1fa2870fe5a859f2110","sha256":"3ff79a0345d9b157bcb282598af3743ac591de241642c62804456c70807f73fe","sha512":"59899808a768636d54215e4538a5b2a20dccad66361e811308e2d539ad22e0423dc15e64c0bb9bc3ffada49e96d3a6dbbf9e80152e945591d28fb573e1d86358","ssdeep":"12288:GWw1OukhqpOchRXvY+BS7SaFZ70d0mPSLPaRrIEE6RMl:Awzhc/XvM7SOZYqmKrUr/E6ul","tlshash":"b4c4231fd9a8d07aed1b9fa84ec563b541a353c8438037fa2de4948a07afc2579193b1","first_seen":"2025-07-31T07:24:41.617757Z","last_seen":"2026-05-06T13:22:59.205702Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1129,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/team-4.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/team-4.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 382526\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":382526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 930, 8-bit/color RGBA, non-interlaced","md5":"bad45ae8efbf906d637a85b506af7cd2","sha1":"9a9ba509b848b19f16818294e8770a6e2e7c126d","sha256":"e777bb8c539d443fa8b455e726b66232275ef6c540fe591f3d8be2d3b8c98760","sha512":"59b81717833109efae0f02ae7645d4380e376b6d4e66251fb25dc94cb748e9c98ba79ebf58b788321405dbf5b3d7b75cf7abbd3570cfb601ba1fd35a33e5dfa3","ssdeep":"6144:3WAPu3gmtBvEzXlv78Px9i8j8i5XnTY3+D+2QcrBAnmy/8fw8dlqFwnTd0yF+Va8:mGu3rBvEzXlvT8Ai5XTYOxvtAT/oblqj","tlshash":"8484233894f4771e10a25d32b02eb32179d75c667b0f01287396e2edeb44ab09159bdf","first_seen":"2025-07-31T07:24:41.681903Z","last_seen":"2026-05-06T13:22:59.207151Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1127,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-double-quote.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-double-quote.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 565\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20feecb979b9dc003e04447c4f77d1c6","sha1":"a45c4560f197c0b92f20f722a3062f30339d0ab3","sha256":"893f1242512829516a53913742644e77e15874eb135469327ca224ec6a413a96","sha512":"ce64a6189199d5ffcad8544bb867dd763bc38bba7dcc4021b84ef34b27851263788f7f671dda6e7f3f6489d7de08efcb2c70c4f89a779330296851d3d8c7d7ce","ssdeep":"","tlshash":"752121dbf34742e4b844ebd0d32560267a273c87a7c285c911a19d44905121dadd9c9d","first_seen":"2025-07-31T07:24:41.835758Z","last_seen":"2026-05-06T13:22:59.12936Z","times_seen":30,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 15:27:50 GMT\r\nexpires: Fri, 01 Jan 2027 15:27:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 510966\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-06-08T07:17:17.392225Z","times_seen":303,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":230,"dns":0,"connect":20,"send":0,"wait":44,"receive":21,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:57 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69085dca-7b0\"\r\nexpires: Mon, 03 Nov 2025 07:53:33 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJGwH3DAAAAAwBuUwKCQH3AgAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541238c119c576d5e5e69e2776519\r\nx-77-cache: HIT\r\nx-77-age: 12\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbc9d37f7ca509d3f2faf0216a2dbc60","sha1":"b141cae5428c630f961ba82494ff8fd0521105f2","sha256":"2285b0615deb1cd53267994a4cd044d2c4512b5516fbf099e3e8e353c705b208","sha512":"383444b84c22c67c4b8550a8c76b68bfe083f5d9f2245b1a1c8493d787ba4a670f3cf5d290a1c8091645e02030165d026347be719104393c9bafa8697925db63","ssdeep":"","tlshash":"e2410693c0b80d531b9c612bb8945a414d54c3c7e88a3d0d366d8a7f2f0ceba10e67ad","first_seen":"2025-11-03T07:55:21.200063Z","last_seen":"2026-01-13T13:06:51.401082Z","times_seen":3414,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":47,"dns":19,"connect":7,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/slicknav.min.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/slicknav.min.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 688\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2414)","md5":"cb0567a8e6fa8a2786dec28833cb1ce9","sha1":"c54e46ca2b58657ce9b9af788c4c71db2f258768","sha256":"2c48050a1280b38ee66b4122dc30f7b8d0d89776c80f76f213dca958e701f45d","sha512":"85eca889e0079a900bdc175a40cb1b20e855bc66f8fa9978686099a96cd7fdfd410a1440aeb072fd75190c75bd5958b9a7aa5ff76a57e328e47e675a2186b641","ssdeep":"","tlshash":"4951af76a5ec0154713ad2246fc0e6cbe4e7310348310a99f99976b1c7be06d7ce1db9","first_seen":"2023-04-07T07:32:13Z","last_seen":"2026-06-08T19:46:01.07813Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/all.min.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/all.min.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21835\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-06-08T19:48:22.104729Z","times_seen":51103,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/team-2.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/team-2.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 684700\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":684700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 930, 8-bit/color RGBA, non-interlaced","md5":"f5323658a98bb65ff062cabfc9ec8cc8","sha1":"f350c87f0462ed86f6b6537bfc9d7d5adfc63deb","sha256":"77e05f994ed84f6b5953e93d613e5161257f63d517d94dede922819dc5129a1e","sha512":"2c472379bd884d200b2b2b8ec515aed75ee1a223050850ce77a78e2e0634f3d53fbfcabfda67aaecbd432e2bb4e4051d657a45b8f02f1355afb8f2ea48942eae","ssdeep":"12288:hN1ylQjNDDqPPaHG6U1Cedjjgn8T2wGvi2+pKYj/9fNOSkJv//Yb:31ylMN3QKInxj7T23vX+Ma/9EBv//K","tlshash":"3ce42341da28aae7f80d8e5cc38c4f46cce69b5e933b943514a46ca75623dc935f1f82","first_seen":"2025-07-31T07:24:41.801512Z","last_seen":"2026-05-06T13:22:59.22245Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1128,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-2.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-2.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15001\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"8d918d6bd63bfbdec82cf8a724a1889e","sha1":"0b83eb25196df9649f9a667fb3bcc974baf3e011","sha256":"9134f2edfe43ae2485e587cba31938c85c7888864837740deeb82a6af9d3f2de","sha512":"f9a8e0478da6b2de3e5aa53d9e0c49ea5f09a0855de13f16a006867f3c781a261043763c688c714f41812cfb3ec2575cfeabbfcf003326bca3d4ad12def3ad6a","ssdeep":"192:JdVdEQeyx9DF6ePJ+0lCktjgegf3LQLs9VmXFK1VSbULrFp2yLuzVRfNVc1bORcG:JqsIyB0CjcLQeYFUvRLuzrfN2ZqsJu5","tlshash":"aa62d0a9f55282965feb0866199bd37ba2864b01139c445e086fa397e7cfcc210ef216","first_seen":"2025-07-31T07:24:41.445337Z","last_seen":"2026-05-06T13:22:59.179019Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-5.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-5.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10424\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10424,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"77c47d39870b6bc09de13707292a6433","sha1":"2c7044fb09b259adcf90e2816889ea6242efe5a4","sha256":"fa1553b78c1ef3d6dcaba2ad679d11905e93aa77c9978d2e91fbc6867f0db1ff","sha512":"08ab923938e6c00d1165c00e9efe879c1e0e0105ca722db233cddecaae2501f4f2b1d07e76f4812fad70e011e6b6aeb09d69a8d51384f87aa4a78ba54d34823e","ssdeep":"192:J+IwsP2G09ecHylLubBYpWImk+FX2VEKhZviYdISBzIbQSslTX:JbwsP2vIcHuL6SCkQXCEaiYS8I9slr","tlshash":"4622b0497b027263c44534b9207a9769e4bc5685fd3b3e3c851522c8dbbd0d8ac76c6c","first_seen":"2025-07-31T07:24:41.57715Z","last_seen":"2026-05-06T13:22:59.154941Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/validator.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/validator.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2400\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7729,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7535)","md5":"580f0e3e78da72a6a5b66ac8998bbbf9","sha1":"0d92104fae1e3aad1b518d2261c9b80b7cc41720","sha256":"7477ff6231f5038b5ec04b0a51298d9d5d390c36df18dde0ecd32af3ac601a1f","sha512":"753bb4bc9b399ddaddde43f09d88b1bce0acbde7f9486616ff34922b86dc8d105c647cea4e1abba6decf982bf9e726fc881be78b44d27880d5f1160a8d92f7e8","ssdeep":"192:CAGMLmHTNFuBv+Hr72dmDdY9clcNkfeL33tO8TRORIz3BMyVkJ:CAbyHTNOv+LKdmDaOlcafeL33tO8TROD","tlshash":"c1f12349776220922f9220f4519b824b72793b69c50a409874ed85f1a9f8f84b7f7f3c","first_seen":"2023-03-07T13:14:54Z","last_seen":"2026-06-08T15:33:17.315068Z","times_seen":1367,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/hero.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/hero.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 962051\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":962051,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x800, components 3","md5":"e76960175a20c7feb74508c3145c9517","sha1":"508a75477054e6f7340f325cdb003f5170b518a9","sha256":"ebb23333b5c9b4c6219b8b0b7a2d873e41fbd44f0159e8869924d3f7e21704bb","sha512":"384783e3e1a08863e17f43c8adf930e594364e85c101760fae456f60da179c755829608d30e49389575c03d5f898067216e8291d56f11732d64fbd3543272075","ssdeep":"24576:u2+uuu6qAvrwsJvghTct9xvi4+P/X9kU2TX8kj:odu6LksJY5ii4+X9kbgkj","tlshash":"2b252335ecd343a15f098032787b2e2c31a457dab4e98ccdc52b4c2de8a9b9e511b67d","first_seen":"2025-06-29T01:18:33.896287Z","last_seen":"2026-05-06T13:22:59.187623Z","times_seen":39,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-6.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-6.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4323\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2104109b0849e961479856e134e009c1","sha1":"e1009f44964d3dc4d3c8d78b74d94a7ca2611cb4","sha256":"c16a47b3b3a401289e36efc1b19576a6d0807a17153a3db73cf0e06172355024","sha512":"8a2f589a2c1b13fe8b93eb1dd097bad53e6051a433a8f5c6d5cd26f33abfb4852111f6335d141b461447cc2a4b901b3693bf26aaf7a5c16e4581b6247f6ecfd5","ssdeep":"192:HJnSu5mv4gVljj1msmgxAfGbJQgI9xZDXBlKhAy/wh/s2hFD6GnzVJS2En6M3p4S:HsnZVlPDmgx5JQnt6Kymnz7M3rrFUgx","tlshash":"4972b56c136d93f4f204b7aaaf29a4ba7e0734de27ca3405ca163d16274195e4cf6cd8","first_seen":"2024-11-14T11:04:52.884555Z","last_seen":"2026-05-06T13:22:59.151733Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-23.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-23.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 664\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57224b8f3c49a49f9fabc548bc011df5","sha1":"dda0b1c7b473ad3863fafba864a3cdbaa2cc2cb3","sha256":"4005bb74db8df5b7cc1f8292327b40b27ce57b72cf73cc47759dfe801c2c8525","sha512":"45481235b0f0be9cec933713ef32c3ff435d2574a731bd581fd44cc1f7ca15f070476d0726ccd25df7ee93ecce7df2d373917b21ad37114925247eab94918b71","ssdeep":"","tlshash":"d32183e8325c0bdcf006879a1a0ab876b51b32f77942e778c599ac35e46340c1fac8c7","first_seen":"2025-06-29T01:18:33.963003Z","last_seen":"2026-05-06T13:22:59.153051Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/bootstrap.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/bootstrap.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15960\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (60298)","md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-06-08T08:27:44.879154Z","times_seen":2021,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/gsap.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/gsap.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24385\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63403,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63106)","md5":"7f2b3bdb990fbf8053a7343d4581b52b","sha1":"9813ff98206439c4b46e9c6789392f2a541daca5","sha256":"f6d6ecb1737ecfa9ec03e37591b8feca3b47676e69348c2e586a983a94ea109b","sha512":"5313fe52125a1915ae306d980ba2cf598a45427b12827a2bd15505dc11dd0fcdcf4bfa4ea4df8561b666ad837e2125fc8e7be0554722a8ffdf20b3970e3652c2","ssdeep":"768:c9pO+E+whCj8pYi+rOyweRxFhP3obX5/F1Chvzc+CUmxCQ8fDF9z0cQIasB046/L:cTOV+spKOcPqDJaBmh94MTL","tlshash":"9353facd3192f42342965160447f0a4bb33be958640f0918f2a9e4cd7d3c9ae42bbe7a","first_seen":"2023-03-07T12:11:10Z","last_seen":"2026-06-08T08:29:57.618282Z","times_seen":1305,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/splitType.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/splitType.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4267\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11812,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11676), with CRLF line terminators","md5":"f45652344dc5a39c46c658464c298b2b","sha1":"c9b75320b7751bc5e46105756f971ad7340f2387","sha256":"13b5cba4d6689a129e2254cb72e6511922f26a15e0d9c10ea1c0e374d625db96","sha512":"c7c8ce6342011f3ccf29c7ade59ca3673ee3c6f2b6d6f6a94ca49dbce6d2e5c27528bddf5e98b732da8f86eb50d228311c46e635e85358fe41a5c3a227c8a9af","ssdeep":"192:KZ4ZgkQoOfxUCpCOCpgYsv65SRxcqL1a1gkXQsksbEy/iFXGvy5P6rhZNaSQvukW:KCZlCVCLsC5+Va1cmU2vyR68S3gR3/Zi","tlshash":"5232e848b2a7b5a196561028817f530ff235702aa55bc450f177fcf46c34caf62a3e39","first_seen":"2024-12-14T22:12:11.515454Z","last_seen":"2026-06-08T08:27:44.872542Z","times_seen":84,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:38:21 GMT","end":"Wed, 04 Feb 2026 03:38:20 GMT"},"fingerprint":{"sha1":"20:22:46:AD:41:FB:E2:25:E8:9E:07:B9:A1:89:34:4E:C4:6A:72:1D","sha256":"EB:B1:F4:50:CA:74:9B:EA:9D:6D:23:2F:E5:17:88:07:A2:DA:B7:89:5C:C4:C4:34:60:4C:15:4E:1E:5A:D9:45"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68e92f38-46dd\"\r\nexpires: Wed, 07 Jan 2026 13:28:06 GMT\r\nlast-modified: Fri, 10 Oct 2025 16:07:20 GMT\r\nx-77-nzt: EwwBuUwJGwH3MgAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123b728b51f6c5e5e69ecb7d902\r\nx-77-cache: HIT\r\nx-77-age: 50\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-06-08T07:14:05.856774Z","times_seen":9276,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":47,"dns":20,"connect":8,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/small-logo.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/small-logo.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2909\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8b448b6e4ffb7da8e418bb9ce473dc7","sha1":"63fefbbf525f7c470a3247be4887c06d725c2e94","sha256":"97efa2a6e651d1662725e5692136cc4e38babb7be13aff2c74637848f7f50517","sha512":"cd2923f8b8dfd1a7d429db3a95cea53819c6a048ebc6bcceb2b8afd39b836fcbd7902cc09fa12f96154fe91565d54a8e1ff225897a2e337a5160a725c1722efc","ssdeep":"192:0zLMjFvwOw3JyKqPlrF3taJwdJFWK96cyXlTwq:0ziYJm3tq9K4cyXlsq","tlshash":"d4f186e336adf2d0dd47ab24d9366836795b38f99f9583894184aec07a60199cc8ccd8","first_seen":"2025-06-29T01:18:34.0027Z","last_seen":"2026-05-06T13:22:59.220256Z","times_seen":32,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-down-arrow.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-down-arrow.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 172\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7eb55997e0900c651c1dd42887c0cd6","sha1":"af6c229cde50cd8c8e74b8b717103db5a6f2be68","sha256":"cb320872f8b2b142927414c8158b3294469d4a05d474682a363b812d0e4e3f78","sha512":"d6eb4f0beef602f0fa6c1f4149068e06fecd5384bb3f1ba44ce7b19f2a82f3babe1373ceaa5441d174f976e7eff5092d639b39d7518c83fea02a43ff803dfc4e","ssdeep":"","tlshash":"00c080f5509cdd24f5558d216d7da45b247344cf1cca10d8c8433111f044dd77c55178","first_seen":"2025-07-31T07:24:41.534416Z","last_seen":"2026-05-06T13:22:59.156314Z","times_seen":21,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/storage/app/public/photos/gnaOJcaOuRbIpIuqY4ZBIr092dHxVr31quUssdtI.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /storage/app/public/photos/gnaOJcaOuRbIpIuqY4ZBIr092dHxVr31quUssdtI.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 Aug 2025 19:10:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26450\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1126 x 332, 8-bit/color RGBA, non-interlaced","md5":"2ad231cd47e0286ef0360c8a63f57623","sha1":"56583f7f8c08343e60183193fe15721b421b9438","sha256":"a34af6b4f339b95cbeba412ae412657d66625ff88258b53461980cb8da67870d","sha512":"3d0a5c991cec3573fbcb0e98a55d0f4f076c0dccff33ace22094bb915a89f37124e41ef51c71ee49b8270dbabdc62ad31734fc6ca76860e2c1e3411f61bfd3ae","ssdeep":"384:aKnFnDqaubj6UKRH5jZwg6tW0E0aUe7stwzoVAC9MpVKgJJfaUKTcShGd:1Maq6UatwhMUe7jiPsVXJJfa+eGd","tlshash":"51c2e08e53d9f51dc40a0636a2d67de10a354fac4688531e927a858efec36eac321d23","first_seen":"2026-01-07T13:24:26.368709Z","last_seen":"2026-01-07T13:24:26.368709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-10.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-10.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 554\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34f14ae48819286d5ed89e839571c560","sha1":"e759c706d1fe99aafe7973f57e30825775a7833b","sha256":"e47f9f0e30a3c33e3ddfd0ffa8883fff9b6ea9f7bb3c1f5d7a40841527c02242","sha512":"a6f1e003d44a1a5cb57ddc4ede0b5ea1268b0e251a19afdfd0ace125bd29a6591cec0c774cf7fca41c58c058e36584c6b26b50dfb7f3930918d0494c4edc93d0","ssdeep":"","tlshash":"0b1146e5936832f0c40363e8887a77257d9b30baef2603cd09ee4944b1b605ec49d9c4","first_seen":"2025-06-29T01:18:34.005909Z","last_seen":"2026-05-06T13:22:59.184472Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-4.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-4.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22768\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:02:09 11:32:11], baseline, precision 8, 100x100, components 3","md5":"27fc2d5be4d761a09fa42e88fa23a1b0","sha1":"5902b45f9e0bda6915f0de0f2b2cdcceea98b2aa","sha256":"1320140634fecac03904ed2d47a594d1de87cbdff5effd01dac233e9e1311108","sha512":"65b957ff4ec16eb95387c7c4e3a0d9867d5f5811c826e942c6d16b440b91ddf23041b671dba7c2a63ad4887669e8de94118ce12d083ad730d45b89a03bf18e21","ssdeep":"384:4F7sKAjJQ7i17sKAj2nUsjjjjm6Kc89qW0gzOledIEnXcjgLoqDlkdfga2YiZ8:4F7SFQ7q7S6bV8dzOlelnXcjgLoSkdfz","tlshash":"98a2ae267f56ed62f8d8a07999dbd65243311f48b7a3128538ad524377b0f81dc1c393","first_seen":"2025-07-31T07:24:41.738428Z","last_seen":"2026-05-06T13:22:59.208302Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/download-app-item-bg.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/download-app-item-bg.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 355\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f336614260ef49973f746ec8c5cde4c","sha1":"d8a23efddab5f7f929f2f5a192f13e566fa6c508","sha256":"0e02edda5bd1dc2bead2cba7e20379036e613c2f3f33bbf8bf8bd450939fe011","sha512":"4819e623c4b8377d17fc82d2ad319ae6c6d794f3932a03961cb3eeb5058e940da50d656de44bf74b1ae9682ae923dbea50119f1a16a0305091bafb487aea6c44","ssdeep":"","tlshash":"ee012dfde27977958300c3997b6ee8c0506ab3e886850140c242771b74c3caa8b32adf","first_seen":"2025-06-29T01:18:34.020434Z","last_seen":"2026-06-08T08:27:44.81125Z","times_seen":22,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/dda3dae56249439d4ae7c10bd9cc40425a6c2693.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/dda3dae56249439d4ae7c10bd9cc40425a6c2693.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4dd-9TRQw40tlGj6Qui1O2wKfGFKhFs\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1245,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e212885e9e0a34bba07dd01af8b98fbc","sha1":"f53450c38d2d9468fa42e8b53b6c0a7c614a845b","sha256":"73a974982ed46abfbceee718b8045ece08e2272daf98c7f84dafb564e4928214","sha512":"97c541e874a897f1ff09e2850fa4d82e0d04edf872553f3f4f5140729ab9e8c762bd4da39d2d65f0642a9d40a24d4880bd24933535dc15dbf2d006e7fad515a6","ssdeep":"","tlshash":"fa21a92d4a9822ed5249c7d2c5047e036bbddcb371003e7eea0c0a4d70db2e9223646b","first_seen":"2026-01-07T13:24:26.37185Z","last_seen":"2026-01-07T13:24:26.37185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":243,"dns":14,"connect":21,"send":0,"wait":26,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/animate.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/animate.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4001\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76809,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d212b97236b2c9ecac13b2918ec753eb","sha1":"1a350ab68259a8c493cd768c898ca96168784f79","sha256":"7f83bb120febabbaa9db513b450456e74072252ceb0c587cd4953701ff741d67","sha512":"efa4ce762238fe3b7aa5f093153770ca567b0938fd94f35a13a454793e0daf1994697a88aced1c790933c98f47edb3ef332a8c8b39915c6bb196ea5f590cebec","ssdeep":"384:5d1A1oYIYc1x1tYNYZ2x2Ivvvz3KVDV5YMYiLR0tftGxcfT7WdXA:L1A1oYIYc1x1tYNY+3KVDV5YMYP","tlshash":"56731d5e1d41118447724b29d7de8e28eb3d917318122eee72ce588b8fb6f6813c9d4b","first_seen":"2025-05-07T22:21:41.432072Z","last_seen":"2026-06-08T08:29:57.504776Z","times_seen":454,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/custom.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/custom.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 May 2025 11:00:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9563\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7d7ea66889df9b627f38914e0337ef3a","sha1":"8666756ee99aa0f6152c82e78e4323f71f77e8e9","sha256":"5c092197cfda52688fb825b2e731d1522b5e2344cbc2ad924a5f21464b6e6ae7","sha512":"e02e0b2a940f7a694dc7981dee618e8c0e89a153f02d2425a049ff654f39004e27a00ba843c494312a64bf6bf714a8f1f882dc32fd536574162488e0b6369ef8","ssdeep":"768:XuqGLomBo8gp1OomB7hBjH1AMbBeweontRI82nYQhMMJeNfCOZJmKl0tpk63+oQV:jmFnXtxF","tlshash":"db530d6dae531c4f235bb894bbf05bd9de6460039f4a01e5f0ea310982dd67c22b69cc","first_seen":"2025-08-29T01:46:16.989901Z","last_seen":"2026-05-06T13:22:59.158067Z","times_seen":15,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":856,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-2.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-2.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 287\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":798,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95b9d4fca6a6e482c7b42d40973a4c83","sha1":"d9af9b85d6f162d7d4c7572c52a57d804344b100","sha256":"7472fd08128230b3ad37abdf339bceb54501b84177be5d741309f3b4b78ff3e2","sha512":"1ec73041142dae99a8275507a60aacb6dad17e39fc009507e5817dcebfc633d985116a8405bca35a70b05d27528b478a2ecc268badff9c4c0609d3229f5963dd","ssdeep":"","tlshash":"480189e421cd50e448014704f68e70ba72bfe2c05d664e9048c21a0fb4ca9af0e77ad1","first_seen":"2025-06-29T01:18:33.949518Z","last_seen":"2026-05-06T13:22:59.224468Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-13.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-13.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 850\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1726,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78cd8595f6ca36e53042ecc61414fef9","sha1":"dacd15c8d676c526738da4cee4de1190a8954dfa","sha256":"5ae84163c6a8315d2660e1152bf60ec2214e8f5f02d7edee473e4594d53f2d02","sha512":"7190c1aefee5a68237630f98c44072742d217404546d9f3ce87a4badf31fcea0bae2bb8e3e9e5b454e4ad43a84bf0723d0d99683989090a75a8457982c826b31","ssdeep":"","tlshash":"d23162f963a5d2f44204cbb48a39f8bd6a6238fd6d138829c7fd6902d0550ef0c59ed2","first_seen":"2025-06-29T01:18:33.920167Z","last_seen":"2026-05-06T13:22:59.190394Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-18.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-18.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 817\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f56b426b6608e0c5a4e4287fa0bf5e0","sha1":"4747a0f58d2aa0e017cec3abd290bf458e1eeeac","sha256":"0c6127bcf340ec69e5b534a057808b06609f05c75b5de23cfdcc750466d1a9bc","sha512":"9fbce4a58d994261793652bad97eb6d76905747ab7c67475a02657f0b360a5453cca3ae204bedd0e2450e82487791a78d8e40494ccb14922fee1a279bbbf0c1f","ssdeep":"","tlshash":"1431645123dd6370f205a378672ba8263d622cea7436c028c5b11d5962a519c7d3ecff","first_seen":"2025-06-29T01:18:33.921637Z","last_seen":"2026-05-06T13:22:59.200058Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/play.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/play.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 236\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":381,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ca1639021e9c4c10561d308ad13cf14","sha1":"15923134aba91e9ec621c44b4055dfde7d7d3f21","sha256":"193c79d09ced717ba2d3e8821457516f9fe32bbcc1a77361e2db851e5bf49956","sha512":"a4e8c7c40ccc42cd1d62f1c9ec63d7d2ed3ca6afb2730117717ad32e1b5b66788804e82009981f915e95bd3233d0f3b8dd7ca9d4fe0008c3ab8e70bbfacc940e","ssdeep":"","tlshash":"e6e06895513dcbbc702ce770026a351b3a8780c4818a0074e4821c11d1507ff3cd0bee","first_seen":"2025-06-29T01:18:33.887261Z","last_seen":"2026-05-06T13:22:59.161611Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.slicknav.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery.slicknav.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4425\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21081,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0008e3e21feedb76a988c5bfc77a2d66","sha1":"795e74dbb3c9da66a93390f551e28907297f5ef0","sha256":"0fe8db6c623ba2bff4fdb7884ebedb8a705415cb2cc50000f540aa4046e0de11","sha512":"31c8741b8c8c942cca51c8e4c7f1ae6edaee1e5af70f5fbbee259fc57b65739f2151dcb7f059144a12f2a43edfa01827cca39d890b915462b567e61e28316674","ssdeep":"384:4EtkdkmXj5GV9cjc4UYkkcx82+hOHr1mp3NRUBw:RtfmXjvg4UYkkcu2788w","tlshash":"4792521971ab2ab650b736bd8baf44003233802b541aed657dae43c45f5162c26f3bfd","first_seen":"2024-12-29T00:41:48.299058Z","last_seen":"2026-06-08T08:29:57.522783Z","times_seen":377,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/parallaxie.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/parallaxie.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 596\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1a97352192cc0508c4f058de99ccf5b6","sha1":"8e46bfe8042e030867cc3990480a9b29a435ddd6","sha256":"cdcd31326b36cc8381111429ca1ea11bd3174c517516a21baf4440082abe9077","sha512":"094662ee18b850e32fb9893c57e940c6f00caaa3922b7bb83275d90451cbee7f4f6318146c71f546c70562934d7855bd42bbf2fa52fc540ef86381896625980e","ssdeep":"","tlshash":"3f419bc06413920b76fbd5e58f7e0900d23ac2171148aa1bbb3e62d96fb052c85c3ee4","first_seen":"2024-12-29T00:41:48.311446Z","last_seen":"2026-06-08T08:29:57.514088Z","times_seen":363,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-6.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-6.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1411\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4025,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b74fe02485f80dffdd81dfa03662068","sha1":"def68e4e22f96877a701f126059f60bacc70fc43","sha256":"2e27d1d4f40c24e538825bd026dc2993aecfe578e5af7318e1633d3019949061","sha512":"014e08bea5874e9e16ee7f594448bbbb9fa14a04cbdfaa902f51a1273cbe93cb9e8cc14f2258f086865062ecc8be736cb0b56db6ff3597e095a7cfa1788d0ab9","ssdeep":"","tlshash":"608165a4b7faf1e4f6a6d7e4c784b0396a6376bb1612c35009a17f4cf8020ac1c58cd9","first_seen":"2025-06-29T01:18:34.016872Z","last_seen":"2026-05-06T13:22:59.189227Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-bitcoin-exchange.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-bitcoin-exchange.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1300\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3868,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a77ce7efcdefe8b3719356ca1a824f0","sha1":"119d4a7214add8dab7774343d423b5461fcd54f8","sha256":"70d01abab32bba83f812a0b2c5685d4ac93689a7bc3646fde7d1ae17049dd9b7","sha512":"cfc8c29fa488c0d1295c812749088b321393d74034115a49c59b9b5b36af37569d72cd8814a56b5302d1ca421e053633a9145a9b9eab48525001666ac1dc5144","ssdeep":"","tlshash":"0f8154d5e36497b8d44ba7907504f87065272cfa7be1cde54b903ec3e5e289ec8e4980","first_seen":"2025-06-29T01:18:34.00955Z","last_seen":"2026-05-06T13:22:59.147335Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-2.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-2.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1776\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"439232bfe371cc3dddb2a9176de9ab2f","sha1":"867c729f43be498d36144cbeebc2ceda3b0a6f08","sha256":"ffb7fbbf4c4d81c8964b3388f0a8c6154bc321ca413d993c78c2ab28ef4ab8dc","sha512":"d102ca24166a968ef81730aa94b6adba3b2ffc0024ff744e5fc6f5e0a650d61efadbedba3f2abf95a21f029f8b2fd75f5404e2c3dd615a88458a78714fa961f8","ssdeep":"96:aSTACq3ELB5jwlrfaaXi6O3jIAkwOG45HwLo42L3QhQjAzy:aD3ELB56rTXTO3jIAkwr45XdL3ZAzy","tlshash":"3d91a5e0272893ecfe01eef9593664642e2b14ef67356866c3604f5075b116e8c3f9c6","first_seen":"2025-06-29T01:18:33.913294Z","last_seen":"2026-05-06T13:22:59.167249Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/mobile-img.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/mobile-img.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6480\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 142 x 143, 8-bit/color RGBA, non-interlaced","md5":"b2eec86717629151b5ad680c4d950f06","sha1":"006050708fc78c94384072c8f3b624dd04aaa8d4","sha256":"f6d7dedffa4b10e42fc789fa656d1d1f61035a57e4dfc2235566cf9f97c3ed67","sha512":"5ff8d68c8dcdd731dbc7cd45f9bc5361ec708e56dc08b7b0cac979ffe6ec1959f3745472dba5827dfe7b222e51b34fadaec2b41a207132ab53432cd84bb3fb9e","ssdeep":"96:5xSlbQg4N6uIDXYjhhC4Zd7SsuqPBjhG5GKsQEKjgCxj/mct1uK8SR:5xSRtPIlFZdkq59G5GKWKcCV/Rnl","tlshash":"4cd19d5aeb0db6e1f7017d730a3254b2f04fccdd51b22d6cd188f09256e6c0e69a51e1","first_seen":"2025-06-29T01:18:34.055372Z","last_seen":"2026-05-06T13:22:59.172274Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/wow.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/wow.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3414\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16064,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6bc8a4b55897e0336d7a85e574a03f70","sha1":"bd3d97645e7ac04d11ae47b6a3219097fa5b82c5","sha256":"a52b5f02950a990452a9e4e1db79dacd5973b1d2e2ec0837da80aac6663d197e","sha512":"e1abca3e07a2c5e5180a96ccf14a39f44cdf17608518c14cbb795ba8019e9787f9e706dd789053ff7d60ed44a720dbe1effc0a1d7404c4f970a257a7f0073961","ssdeep":"192:iF0VXSXMk/JCpC22iNVGHOFqWjJbY4JGe3dSDpKJCpyJYsduDjgXiJKQtG0h:dxAMgoCPiNguv1kEfdSDpnaYsdudgah","tlshash":"c272ff893a5a31618737b37ecf5f8108fb39166f11551158be9c8ae41f7092482eaff8","first_seen":"2023-03-12T22:55:18Z","last_seen":"2026-06-08T08:29:57.529302Z","times_seen":439,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/function.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/function.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2112\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7579,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0d3e056f5e7e1f0f11ae85b8b877398f","sha1":"5f2b99b1b323b2edf471fd90aff30bddfad653a0","sha256":"7541800df82c90f3a02759a9d5d7f5c97fc44dcc9a454e8e693bca394ccca635","sha512":"9b39a54a0144cec9ac53e022865d1e2ec32389ff7601e599571649ffe3236d9ed57b0721bec38cece75f2a8b4f54163a5ac907203ab2d49dee634fbcd64cec15","ssdeep":"96:8QiCnPQusiPQK6wsmPQmV8soqkPQKbSZWtIEIV/gDKoJaGk8yo9ChcPQpesrWQ/s:F0wSfSZtoDKoJaGk8yo9CW+1+","tlshash":"59f17640e32c20a14a3b666d9dbe53c3552c022298568cbbfcee847d5bdd93e2199b74","first_seen":"2025-06-29T02:39:34.344487Z","last_seen":"2026-06-08T08:27:44.859584Z","times_seen":38,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:05:38 GMT\r\nexpires: Sun, 03 Jan 2027 11:05:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353898\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-06-08T19:52:57.307525Z","times_seen":19218,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":207,"dns":1,"connect":20,"send":0,"wait":44,"receive":29,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/webfonts/fa-brands-400.woff2","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108020\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-08T19:34:50.670441Z","times_seen":19102,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/storage/app/public/photos/tFdnCUJuMrtxSgoOPHAVXC2mCxq54ulhwt26WBGj.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /storage/app/public/photos/tFdnCUJuMrtxSgoOPHAVXC2mCxq54ulhwt26WBGj.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 Aug 2025 19:10:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26450\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1126 x 332, 8-bit/color RGBA, non-interlaced","md5":"2ad231cd47e0286ef0360c8a63f57623","sha1":"56583f7f8c08343e60183193fe15721b421b9438","sha256":"a34af6b4f339b95cbeba412ae412657d66625ff88258b53461980cb8da67870d","sha512":"3d0a5c991cec3573fbcb0e98a55d0f4f076c0dccff33ace22094bb915a89f37124e41ef51c71ee49b8270dbabdc62ad31734fc6ca76860e2c1e3411f61bfd3ae","ssdeep":"384:aKnFnDqaubj6UKRH5jZwg6tW0E0aUe7stwzoVAC9MpVKgJJfaUKTcShGd:1Maq6UatwhMUe7jiPsVXJJfa+eGd","tlshash":"51c2e08e53d9f51dc40a0636a2d67de10a354fac4688531e927a858efec36eac321d23","first_seen":"2026-01-07T13:24:26.368709Z","last_seen":"2026-01-07T13:24:26.368709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-24.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-24.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa89f5c39414e4a55fe99bea5f8a2193","sha1":"ab754adaab4dbb6acd5242a92c4f183160ef60e1","sha256":"f798603378a746b5e6cf347d2dae94ab50fa892e011cfaa21b35d5109d98123e","sha512":"d93571ee5643d577cc4fcdd50c9f14029f5a899a5f876676da98a106941eb686a29a25e21c4a9eb33babd83ee4a99ea79957bf6c010427da1ff5bb288e290887","ssdeep":"","tlshash":"3121573171296afee349eb7ddf52583004c673e47e418090c2e4792068758df1e25deb","first_seen":"2025-06-29T01:18:34.022322Z","last_seen":"2026-05-06T13:22:59.178007Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.mb.YTPlayer.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery.mb.YTPlayer.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14343\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64021,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63797)","md5":"b557a117a3632b5d81f596014f5aed6e","sha1":"29ae6394712b0988976b4f4b5b547c4e6784102a","sha256":"a7611724b2b8c3e84b557184d904247794c9cb94200c279842ad3c914e096cb8","sha512":"ad5171eef5e0555f1c9a01bb46c64d43af0234167b18bdf14d897a180560977890892c2db838d3784d4611280f482c24127fe28c5272b25675bb36cddec9b062","ssdeep":"768:4KNsVqea1TjiR2OnOl5aLc1tnpaAaVAupnz/D9G7BC:Z0q9ljiR2OnY5aLcTnAXeyzJWBC","tlshash":"3d53c80aa55cf0ae467201a5b076832c72394b51d3eb9269f047f69de40a65f703fbbc","first_seen":"2023-03-07T14:24:04Z","last_seen":"2026-06-08T08:29:57.567737Z","times_seen":767,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/webfonts/fa-solid-900.woff2","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150124\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-08T19:48:22.11381Z","times_seen":37746,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/main-ptirgKus.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:57 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69085dca-41cde\"\r\nexpires: Tue, 03 Nov 2026 07:48:27 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJGwH3CABWAAwBuUwKEwH3FAAAAAwBT3/Y+AG3BgAAAA\r\nx-77-nzt-ray: fdb541238c119c576d5e5e6948c4411c\r\nx-77-cache: HIT\r\nx-77-age: 5636104\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":269534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28080)","md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/bootstrap.min.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/bootstrap.min.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 May 2025 11:06:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28331\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232978,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1c1accfbecffff80fb1cdb595186dabf","sha1":"c08542b6ada22781c5266506d78213f48031fc20","sha256":"071c258676eac28edfbf546c2d99a826424881c4b84b87745c868f445bd9f08b","sha512":"4af9fa676a2639ec68ce5d945445575d59d902019423c08bd523de6b539703306111ec0d12348e821e671bd8edb45fac10a444e14eda6d486f63b8cd4415e93f","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Q59P3CV98IsYRElV6V6pz600I41r:pnIw98ffV986I6V6pz600I41r","tlshash":"283482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2025-06-29T02:39:34.339133Z","last_seen":"2026-05-06T13:22:59.173342Z","times_seen":16,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-3.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-3.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 429\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":965,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2013dbc4c7da3a756952ef756c289f20","sha1":"e51e8b5328e339b56a2f2cc00b421a996f831637","sha256":"f5121090129629becb2e310cbdd440d67ad892d01fc60c3f59f2c047cfda8e2a","sha512":"e9f464ebc5f0a35969d74734380b8367a8708e28eaa1eb8ed39ccfc67f73653bd51918c7a17480250b45c9dd65a23f51570c2b77489d5683b0c588dc77704ef3","ssdeep":"","tlshash":"3a11bd91b4fd52f5a01c77a8445dd8f837f878e8ba28fd2394432466fc87a9d64b8210","first_seen":"2025-06-29T01:18:33.941641Z","last_seen":"2026-05-06T13:22:59.138187Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-11.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-11.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 687\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea0ad50af192fbbfc1d123a913a5eece","sha1":"af64649b5a5d9e76711f8e9c59b141d288d538f6","sha256":"cde6e16ea5d5f006989702f8c8529abe1f2dd94f627a880dfc9fed8023a29727","sha512":"bd8c4b980eebf2c737da2421fc3de3aec58b9b0a4786ec05829560601f7f7820a32427c82b6419cb3ade86069372e1d8c77aac184b8e55dd6d17b31708eadda8","ssdeep":"","tlshash":"0e310ea6abecf1d0d405fb69714478623a2b34fe7e25c79c4b861894ba4108f610e8b8","first_seen":"2025-06-29T01:18:33.882137Z","last_seen":"2026-05-06T13:22:59.202526Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-our-services-3.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-our-services-3.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1731\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf2c3bf130b302482663651059bbb9f9","sha1":"760a97062ad81f0dbaf0dc1d62e08ab6ec3e28ca","sha256":"d5ddaa212840fc89c4d711f1040b8fe16610a566854ce650661915ac3d8417c9","sha512":"9982973c3b0cc4c2ff9badab7a08612076e855a74c7e38ff35eff1d43293c17a2210f2abe59edcefad77afbd45cae8e98bcf34e130fba33c8ca809e138ed0ced","ssdeep":"","tlshash":"9e81b5b437b553acf552b7ece5276038ba862cf57b018a42d761ad01b1520ac8deecd3","first_seen":"2024-11-14T11:05:18.586081Z","last_seen":"2026-05-06T13:22:59.16873Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-15.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-15.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 485\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1261,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca9990caf8caff8eab6fa7e5917c2942","sha1":"27ee7fd5bacf923dcd5772da37c7ae497ff06400","sha256":"777dce3b9a466161c85a4a2af5ad58311365913aa68a71e673ba7b55b2c29cc0","sha512":"e9a1f3a2ca73fa98a3606e8e85468a18d72b159bab032bc654084fbb9cd39175d9d61dfe45078286e9fa5f0ae2a1d9ca7a056e955e8f0f642956fc7f6cffe03c","ssdeep":"","tlshash":"ea21287433bec6702196c3e10bf4f878496b11ab65039258cfb31c84bca3c6e5e988d0","first_seen":"2025-06-29T01:18:33.943403Z","last_seen":"2026-05-06T13:22:59.199113Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/swiper-bundle.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/swiper-bundle.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39610\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148486,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266), with CRLF line terminators","md5":"badf0c9a17e4ab4acda01efa093bf952","sha1":"843d93a0ed6f33fd41b994f58c44f4b12b4deedb","sha256":"9d88c5fa4d423f2a99f0f5f9d9263624f36c80e7a50f5e7c4bd45a93332ccf4d","sha512":"e46bf4b6689b0cd8618a210c7ceed9c09ea2ca409b5843d46c17959ddb1dbbe81abc1b978dfaccecb6dac840b511fb1bc1aeb7ab73bc777dd1bf36f0de691df6","ssdeep":"1536:TKJNfGmhnDcu8N4zeS3339a/BlxvHR7tky+j5N08Ufj0SaBDIvkAygTwwcc3AbSR:GJD0Nhos7tkyuBDVAygUg3KS6lfed","tlshash":"e7e3e889a221b57646e316db93e4c261b3b54500b80ac4f470bd4c9f597ec9813feefa","first_seen":"2024-05-29T00:14:04Z","last_seen":"2026-06-08T08:29:57.527595Z","times_seen":338,"resource_available":true,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/storage/app/public/photos/tFdnCUJuMrtxSgoOPHAVXC2mCxq54ulhwt26WBGj.png","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /storage/app/public/photos/tFdnCUJuMrtxSgoOPHAVXC2mCxq54ulhwt26WBGj.png HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 15 Aug 2025 19:10:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26450\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1126 x 332, 8-bit/color RGBA, non-interlaced","md5":"2ad231cd47e0286ef0360c8a63f57623","sha1":"56583f7f8c08343e60183193fe15721b421b9438","sha256":"a34af6b4f339b95cbeba412ae412657d66625ff88258b53461980cb8da67870d","sha512":"3d0a5c991cec3573fbcb0e98a55d0f4f076c0dccff33ace22094bb915a89f37124e41ef51c71ee49b8270dbabdc62ad31734fc6ca76860e2c1e3411f61bfd3ae","ssdeep":"384:aKnFnDqaubj6UKRH5jZwg6tW0E0aUe7stwzoVAC9MpVKgJJfaUKTcShGd:1Maq6UatwhMUe7jiPsVXJJfa+eGd","tlshash":"51c2e08e53d9f51dc40a0636a2d67de10a354fac4688531e927a858efec36eac321d23","first_seen":"2026-01-07T13:24:26.368709Z","last_seen":"2026-01-07T13:24:26.368709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/css/swiper-bundle.min.css","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/css/swiper-bundle.min.css HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4494\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18449,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18179), with CRLF line terminators","md5":"fc28d0f8ba6491f8c31c2bd014e69b4c","sha1":"e68e021399224e2188eafc0bb3da245eacc707b1","sha256":"04251446bbc41be2595241e269decc7f53f090fb4363b24be99fb2dd6a976490","sha512":"653523b56685c014bfc99b9b7b564f067b324dae4c5a799f558edc1c5bf5409e5f70b92f3a5bc16e907bf040487c7fc775a011a6f773c968b68cc031fefc160c","ssdeep":"192:QGkmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxXY:QsUbe5JndKW+Sa0ni24tnWfz4cfQ","tlshash":"6b8255a45310182753274f374bb1cbb9e97444d20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2023-12-22T09:23:59Z","last_seen":"2026-06-08T08:27:44.862045Z","times_seen":455,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-5.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-5.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 616\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6feb934eff69a2e94631608019450f30","sha1":"599797a2eb7936706eb66c36c9ee7c34599259db","sha256":"f2440cee1c99be8e2ccf037d068784d5cad8098f9a7a10c3a809315e81ac1f67","sha512":"ee07ffe3eb58ea1ad57d00a19431ff5dd10da15695e648b6075a409d72672a7a6c0cb56ddf2d032ff7181e952791f29ce0656522216935736ea8a266ca09ef7c","ssdeep":"","tlshash":"6631752db6b9e8d2f384d3f8ca488479b97a91e34280422885d5ff1b78105de580eba1","first_seen":"2025-06-29T01:18:34.013664Z","last_seen":"2026-05-06T13:22:59.130562Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-how-it-work-3.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-how-it-work-3.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1136\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4146,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdb9f8aaa4a964b2fbc269cdd92b908f","sha1":"ee05d0f7544c437960cf071550efc76a9d76a0c3","sha256":"26dd287f36a8b6b41873965ee3e7ec6ee2cf12486724967eaf450a9ebaf207cd","sha512":"b9ea079e1cc1e1884972db736a3773c9fbbbbb53da869871eb739889e40780151a484838dca8f1d105e7375831f0506674962c2236bdec03b83154421726e230","ssdeep":"96:9TSR86pjfagzDFfTmqLiJ3qlgCEJvM2wXZXc:x6jjfDzjLiJ3RCEJvM2wXZM","tlshash":"6981edd973082e7cb83227e1cb1271b0762815a75ad9f255df326c30861a10eadbfce4","first_seen":"2025-06-29T01:18:34.004025Z","last_seen":"2026-05-06T13:22:59.191376Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-1.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-1.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10990\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"000c620f68ec87b2b2c46a8c62353568","sha1":"bf90de88b1451a7575101df3c2394fb07ea576e3","sha256":"c182b31e10ce47c1b7982829c1753288ebe604ec4a194f49d5951721a7487efa","sha512":"d07da6d86f0240a39536deeb2aa3e9c850babbb52602966326c8d73857ef7bb72790a857080fbb8f6dd247913a5660ecada1c4aa065ca0e9bfe8b4619588db57","ssdeep":"192:JbzIohREBd3HdHCdtOe9Llu2CY1IvbQH/G//IbpjGlXmu:JwoUBd3BCdAepIvbQH/G/gbdwWu","tlshash":"8332c00c9ce5c1f868426bafd16e58231a37b77db07893581fa33681e2d51cece10a5b","first_seen":"2025-07-31T07:24:41.384395Z","last_seen":"2026-05-06T13:22:59.148371Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-8.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-8.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 730\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c87e0ed97ce72f447c921a99dca8b21","sha1":"fd245cbab8c1f33f41fb341af7b25db264dd2133","sha256":"60abc2cff62144e43a96b4853e2fd56136750a435a7e14e53b09d1462ac48fd7","sha512":"bebc2d49777adc551d569da38c3944971075230ea31abec5a8e0a02b21c7b1d71051cc30e403448fbe3dbebedfe767b97361af6e08133323eb706b044ada9b9c","ssdeep":"","tlshash":"e33142949390e1e18116b7f493a8f6b86ba614bd3542de1d2dee3c99ee0247ec8324c0","first_seen":"2025-06-29T01:18:33.893663Z","last_seen":"2026-05-06T13:22:59.160416Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-how-it-work-1.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-how-it-work-1.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1172\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2932,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a01afb74fe623e490cda5546e1503041","sha1":"106e67cabdfeb55280aff61a4da8511d05d06791","sha256":"db3c34daaee1f8bf053510b10b151ea208a175279ad6af7b110cf69ddf177a3f","sha512":"e4e01c131c94508082731b9aa844ee7ac8b8a9c62a930de2f634ead9954a4bf36eb88f15e1540e07c59df9e05582ad9b0bd55381822ceb2452a0109200deddc6","ssdeep":"","tlshash":"8351995023fdd1f5e40ca2f9025d74692e7a25f817a040e9c3a17e1758525affe58ee0","first_seen":"2025-06-29T01:18:34.038962Z","last_seen":"2026-05-06T13:22:59.140733Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-20.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-20.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 655\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1ca355efc3ea975611b2fa7d4c7f123","sha1":"adb9276742051f4f330dab04d2e60a82b4eee232","sha256":"2f2c1475b258bcd7bd65b5a8d473973823262078a4e85f12f56cbc2bff59ee1b","sha512":"89e57e5f31cf14a2d00dac46746ace279040e309934ae3b8f53d207bf4590fb39310b1bf250e336f89ad5ee9e7eb033ad252d08f865e85cfd51883ad37318cc6","ssdeep":"","tlshash":"862156d03348caa8bb0eeb990557247617733cdefe84d248c6cd1513325069e5cb4dd6","first_seen":"2025-06-29T01:18:34.000122Z","last_seen":"2026-05-06T13:22:59.21099Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-why-choose-us-1.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-why-choose-us-1.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 954\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2308,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d6b4337d741afe80a78c2878bfd9f40","sha1":"cdd690ed5ff7e8f316fbfa7eae49c687ac40e20d","sha256":"c2c9bbca0544ab88ff6fa2c8092d05343eed8803f519feb2a8fc600147c48ba9","sha512":"31a434cae484c8efaa2b9b038a151e9a01a1abfae386d6fa6f227de4c03bf023bc9c61b5be71e4ef785d053ffabf833e00dbe83eef7436b42a04e61254ba524f","ssdeep":"","tlshash":"3e4146a43378a3fdb146b3f99329cc666b5320f17745e94fd3401e4260444394de54af","first_seen":"2025-06-29T01:18:33.951317Z","last_seen":"2026-05-06T13:22:59.204481Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.waypoints.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery.waypoints.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2592\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9028,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-06-08T18:41:44.357053Z","times_seen":16556,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-checkbox.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-checkbox.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 354\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccb1116701536bcfcc944ec0e9190be3","sha1":"11226ef6b8dbdff193c5053969839e8327747d19","sha256":"d50a948f9b48b6389f760cbac289632acab67364fedbccc3f350ffc47fca76db","sha512":"0a9ef8647f8485f8b7bc36fc185233f836cceea444238fc98e8c4c27987f944f3ffb0d7fe655e587dd319a3199801423a1199ddced98d30cc17543891325804c","ssdeep":"","tlshash":"56016874e35831cec51ed3f03654883f727d32a49e474691421c83dc93469a09e69dd5","first_seen":"2025-06-29T01:18:33.976769Z","last_seen":"2026-05-06T13:22:59.150288Z","times_seen":40,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"35.157.84.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://primevestvisions.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 951rYzi0Jt20oKe6POS3EQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 07 Jan 2026 13:23:58 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6TjrTKOMpKgjIBGjef6kYcnTC+g=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":270,"connect":290,"send":0,"wait":22,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-12.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-12.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4623\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14565,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3765aeb642f8544ab17d6890262648d","sha1":"dd29c883d80a0c2cbd56ad621f03bb42c12778f7","sha256":"214896f2ad7cf3bd5c23e464481981e438166fcaad8f1260ec9748126c44d509","sha512":"8f6f187c07155c95a7b80bdd612579e89b19a97a38367163ce9cbd2a7e6648fe150ef555007b6ee60767b519869749a43fbb55880c75d8ea2c35051be8fd47c1","ssdeep":"384:9ZydxmK5S6YMdlO+4F3tAYoPQASmpcijtW+X9gS:9wxmKI6Y8E3ivPQASmeif","tlshash":"ca62c5c5b3fdb3e0e206e3f486aa64713a2724f63f22ca9d4be65d92e55205d0495cc3","first_seen":"2025-06-29T01:18:33.928917Z","last_seen":"2026-05-06T13:22:59.162949Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/icon-ticker-16.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/icon-ticker-16.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 774\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bf957ba59665da84c00bd5b2ab38f72","sha1":"f1cc8b823217491aa5c382e706bad621b272f95c","sha256":"b760ab37b7529ae61d13da7174d7a4b10d0221a6932c9c0489d8d1ded23be1d2","sha512":"b7c9f33fdd78ba3ef9c657d263f6cff7e6a47d3767516d9bc9a4d4551501a5e585a0e62258defb2d5b416e556311b3e0d6a343d704e8f1658807199eaf89b566","ssdeep":"","tlshash":"5131ff9637a8f78df6429ff5465ab0a035e018de3afe9440c6d80e41a05166d9d0e8f7","first_seen":"2025-06-29T01:18:33.914895Z","last_seen":"2026-05-06T13:22:59.177273Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/author-6.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/author-6.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9694\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9694,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3","md5":"98ed2382e4263732c5cbc11694ee080b","sha1":"f9b2b7e34d95d9c098f0531deab21b42ffc895b3","sha256":"12021f6df2ce7d526e37cca4ae79b190a324128697935f3f44af45b79d09a930","sha512":"da62394ff994c13cdfba001ecaf4d24e2feef83adca251c437cf3178651675e4088cfef117558f1298e3acf143f4e716879400364707c6bc94d81e592a2ee450","ssdeep":"192:JOLjHrW+BAt5P061D1tvqhG39eSoYGsSpiThQvHaVGUk++N7:JWjL9BiF1+s3oYGvpiThQ+Tk++7","tlshash":"6b12ae841ba3f7b0ef92a034be528c3661714f82fc8465221c270af0ed697a5d48c6fc","first_seen":"2025-07-31T07:24:41.727388Z","last_seen":"2026-05-06T13:22:59.209695Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/jquery.counterup.min.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/jquery.counterup.min.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 492\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (907)","md5":"7f715449c966d4cd0af405211f67f59e","sha1":"3b272fb0026ee40755abff4e82a78531408b3fc2","sha256":"a70feaa15f50b1f24266250a1415014bfbc73f4037370f15619e87b2cfc6d94d","sha512":"21b4abd78bd23a7b24ca48500f05438cfad1fc84606d918d11fa1d94ce8a2ffefdb034e0cd51ac25758aae1928f8914f8f9be146ae7fdf7967ac9498879ba949","ssdeep":"","tlshash":"1b118cb9790b688d7611f46db2bfb4589032bdbc4841584a70c941802f95b3e3b53774","first_seen":"2024-12-29T00:41:48.302218Z","last_seen":"2026-06-08T08:29:57.517282Z","times_seen":487,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/js/SmoothScroll.js","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/js/SmoothScroll.js HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6652\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23366,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e501b30be0e9a13e61a94f9c6ba6bef5","sha1":"9538eebb191cfb654e730146c6081b832a54833d","sha256":"03f70af99632d66f88e05d4a1b353069d977955447951b00627ced36dfdacb8c","sha512":"c8dd3107169e24c726ff528482df0e7c30f276f29951236299220d0243b1eedd0c0dbceda472c5becb5f4b93992acdcac3a2c89c66fc1e0273483f3fb9ffd7f0","ssdeep":"384:ahtB3DPRPstk034JMa4I78RwuoVaoQZ28GAGdlFv9V/TI4CFRWz6A:a7B+k0lS8RLoVKs3NXlDsNsz3","tlshash":"95a2a39955e32c6116af613e975f92c673744053120add25380ebfa82f8cb7443b2fea","first_seen":"2023-03-07T12:59:33Z","last_seen":"2026-06-08T08:29:57.503139Z","times_seen":945,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/bg-img.svg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:56.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/bg-img.svg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/public/m/css/custom.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32341\r\ndate: Wed, 07 Jan 2026 13:23:56 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"679233fc1abab6aa5a6149796fec5432","sha1":"563e4d83cf4cacb42c988f97914d50dd996539c7","sha256":"6ff91a5ebedac574638845dc45a575026ad46fda124d0a7b2134f048c2034cd2","sha512":"8fd60a72c1aff8de6161aeda7f941ad2f0a4ed8d7021a663de8fcdcd5b629bf613bfa15e18e51e710a2e91b5f9a43c488f39a7bfdfd3eb6fb73dfdcfb4e10c19","ssdeep":"1536:lpO5MltuRmOXYwL18gZ5Nnzlh2QKVSgME2q4fY9:UO","tlshash":"7973a6ee6b525dd05dc8c2c6fe1191e87b0ba47e462b8725c00cebb4384ec6ccd6ad95","first_seen":"2025-06-29T01:18:33.954686Z","last_seen":"2026-05-06T13:22:59.186438Z","times_seen":34,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:57.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 03:05:44 GMT","end":"Tue, 03 Feb 2026 03:05:43 GMT"},"fingerprint":{"sha1":"37:BA:FA:5B:53:2D:84:E0:FB:81:87:85:C5:A9:5B:0E:05:63:86:5E","sha256":"CB:7A:FB:73:78:5B:E8:CC:67:2D:67:04:0B:9F:6A:DD:44:91:50:28:4F:04:0A:8B:F6:0C:29:08:3A:C5:CC:60"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://primevestvisions.com/\r\nOrigin: https://primevestvisions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 13:23:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 33763f6ddfb2a85ff042089718edfb908868528e\r\nx-77-nzt: EwwBuUwJGwH3kwAAAAwBuUwKEwH3BgAAAAwBw7WvBgG2WQIAAA\r\nx-77-nzt-ray: fdb54123254b7d5f6d5e5e698a95de25\r\nx-77-cache: HIT\r\nx-77-age: 147\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaa6ba52943a5e44f695684fe0452d88","sha1":"be3068ed1bee23685694678914dbc831269e2c81","sha256":"f2bf55f12f577af380f9e18e2223493abf01887c75367b9cbf106bd7a021d4bc","sha512":"1852e89a1e925807dbec8bd9a2e82787351cf5c83afe476b3695c00bed34cd1cbd091db8053acb697e3d81c2bdee590e35cc2cf76e7652377e6e39ff92088d8e","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/n:Al3GKYKZrJA2Yg48fXPdeD/n","tlshash":"f3e1c64f9a144da987c6438276cfb84675bc80734250993afd8cc8b842697cd63e3b98","first_seen":"2025-10-06T22:02:44.567758Z","last_seen":"2026-01-13T07:56:55.665114Z","times_seen":4037,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":66,"dns":32,"connect":8,"send":0,"wait":8,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T13:23:50.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; expires=Tue, 31-Mar-2026 21:23:54 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nprimevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D; expires=Tue, 31-Mar-2026 21:23:54 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 7506\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Jan 2026 13:23:54 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54575,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"08417611cd21ee750d497aa5049d05d0","sha1":"202c1398b14cce664d045191cb716613a64b9baa","sha256":"7c3426de3db9ce0a41cef0789ac3db2121eeb3427b0bf5dd3da1365dbfddc594","sha512":"1ee7523cf2fae73d0273ef36836bdbd00f9c45248b27443a814d4beb8311a5fcee942ff3e8ff8abe5727eab0fa1a83ddf375fa23b8c2c33be8357a22e6b292f9","ssdeep":"384:8IucdJCFDaJdO+kjHtSO7XbgzpS6rzr8TwUn7KY5EEqw/HtSO7XbgzpS6rzr8TwF:5Qa8SjMOIeLVCyIo2+","tlshash":"be33c03119ce5d7b0107129b71657a5a70ff8e31ed2f8a92f1fb064963d7d88ba22432","first_seen":"2026-01-07T13:24:26.40714Z","last_seen":"2026-01-07T13:24:26.40714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5939,"timings":{"blocked":1914,"dns":103,"connect":40,"send":0,"wait":2106,"receive":0,"ssl":1773},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"primevestvisions.com/public/m/images/about-us-1.jpg","fqdn":"primevestvisions.com","domain":"primevestvisions.com","tld":"com"},"ip":{"addr":"185.254.196.61","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://primevestvisions.com/","date":"2026-01-07T13:23:55.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"primevestvisions.com.realexpres.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 09:13:48 GMT","end":"Thu, 26 Feb 2026 09:13:47 GMT"},"fingerprint":{"sha1":"09:7A:97:4D:1B:A5:B4:4E:91:AA:3F:08:41:FC:77:DB:D6:F6:EA:60","sha256":"31:F5:01:E2:64:3E:71:4A:1C:27:1A:5B:AB:BE:82:0F:04:54:A0:4A:2D:16:37:E5:F0:9E:A2:E2:A1:44:E2:65"}}},"request":{"raw":"GET /public/m/images/about-us-1.jpg HTTP/1.1\r\nHost: primevestvisions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://primevestvisions.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlZEbU5Rb3M0K1YzbHdEa2ZtQjN5NUE9PSIsInZhbHVlIjoiM0ZWK1lpZVBZb0RpMGN2VWNocXorNzYrSlNJR1BkbUhaMGdmVEt3bUx2RDVYcml2MXV3TnlNaDJ6UVQ0UFBoV3Nua1F2cDNQMkxPTnFScHRNSUxJTmduM1hpYTJDdjYxNFhvUjNHeTFpM3RZVWZJeFVkdUdUdFIwRGdhdzJzd3MiLCJtYWMiOiJiNzQzZmU0NjlmNzU1YWQ1NjYzMjc0OGJiMGEzZjZmODQyODBhYjcxZmMzZTcwOTQ2YTQxMjhjZTE3MjAwOGVlIiwidGFnIjoiIn0%3D; primevestvisions_session=eyJpdiI6IjI3cnBqTW1iMGdIRWtUcmh0SFdZMGc9PSIsInZhbHVlIjoienVURzVSNmFuMytvUmp4QVN1V003cXkveGpnYzY4em9XOUxkMFNqL3RVbnR1Mk1rYklaclRFaG4wWlV6dnBkOEpWSGNBamhIL2RRWUVjRzBESmhELzZaT0pJRnZOb2dtTG9LaWxpUlZHeEN5K2kvaHhDSE1LMnFEbDBGd2NXSDQiLCJtYWMiOiJmYTNiYzYyZDE4M2JiZDQyYWYxZGMyODUwZWZjMGNmMzNjODM5OWY3MmE0YmQxNGM4NWI4NzQ0YmI2NWQ2YjI5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 13:23:56 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Mar 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113460\r\ndate: Wed, 07 Jan 2026 13:23:55 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 302x467, components 3","md5":"df19d772673b22d08c521f93de5c3e7a","sha1":"6bfaf97e307a457069ee8d035c29f700b4d14d21","sha256":"8d0e6af7251ff03ca8c655b28fa8f624c686ed6dfdefd8e1d143af4d0fd6bccb","sha512":"93bff946605a388e2cf710387122f25c4e8868437a33c2928085265628e6aa9af57f50d9ad6e485cf1856ad0b1fcd93acb3ac3a4e713182cecf02d91f26ac47f","ssdeep":"3072:zo2RGiElxUfkwLKY1L9raoZa+GonusLV/:E2RGiKUfkCFkoAtE9","tlshash":"72b3127ef42c12164af2d160315c5d8e50f161ba39a7e8f920df513de3a1919382bfe8","first_seen":"2025-06-29T01:18:34.007094Z","last_seen":"2026-05-06T13:22:59.164591Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"primevestvisions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"primevestvisions.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}
