{"report_id":"732af4c8-2e06-4ae7-9f1e-8d24c9c814d9","version":6,"status":"done","tags":[],"date":"2026-06-03T10:57:16Z","url":{"schema":"https","addr":"cryptoinvestment.cc","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"final":{"url":{"schema":"https","addr":"cryptoinvestment.cc/","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"title":"Qf Remedy Ledger - Next Generation Crypto Wallet","dom":{"size":57677,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14102)","md5":"37ccd2317ebcbdc69f75f64912eb419f","sha1":"a592e0870d99820f302ea8d38b577dc056700156","sha256":"61e91c17cfa75c85bc158143f7ad248208c84f7673df9b8a87612ac31d166186","sha512":"a5f95a9c5585be89eeaac092e7a7d8a49274616946f42fd8476e3cb0339a78a992d6db52949e5104e6f2152a1b363b8daeed99f24b0576187c0f7a973fd71e84","ssdeep":"768:ZpISleFAh1XV+WbQLbfIHWrZkJk+RU+8UqbHtXoOhcRGaa/zul:ZpReah1XykJk+RU+Uu","tlshash":"dd43943c72e0243e6897c2f2f6627f29ae2dd683ca1f9a9cb25d02505fc6e554c17684","dom_hash":"domhash7273962b5fdff1c7a8beeb793c2b909f","first_seen":"2026-06-03T10:57:38.747972Z","last_seen":"2026-06-03T10:59:34.239032Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptoinvestment.cc","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T10:57:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptoinvestment.cc","ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"domain_registered":"2025-01-27","domain_rank":0,"first_seen":"2026-06-03T10:57:19.756122Z","last_seen":"2026-06-03T10:57:19.756123Z","alert_count":10,"request_count":10,"received_data":1916138,"sent_data":11113,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-01T07:32:20.81408Z","alert_count":0,"request_count":2,"received_data":806001,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":1,"received_data":43600,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-06-01T07:39:12.914211Z","alert_count":0,"request_count":2,"received_data":816001,"sent_data":830,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2236,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"bcb6610669da1bd559a7a24018f452b0","sha1":"0268853b41eb6466f4d8006423e6aeb14147325a","sha256":"1806433eb59c2e58318f4ce5802d7afe49f1ed3c205216e7d9351c0d62fe9030","sha512":"cf9c5a04aca91f25e4b2a2f504a2af866c197341daa9d9d37369e2be32b8a343a1150be0e06e4317f6f2f8c0323f955d461af03e44f88b50cb110cd9ea0c7e41","ssdeep":"","tlshash":"fac01290088a2920c3123481842791a66168aae2827e88a53a3ce3589633086e0a8c5f","size":165,"data":"","first_seen":"2025-07-14T20:59:49.098709Z","last_seen":"2026-07-05T01:28:21.472959Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"48e4b973fd42f7b44cdca9eda2772aae","sha1":"cb4e9f9da0b06f6924e53db0944a56c2e0a4ce2e","sha256":"f886b351b568317a4f83fd679895e39fac8e1d3dec820ab052fe394729340783","sha512":"fc3690cbbaf94b7208451e5a8da3d07117335fe5d45f9c5813cd5c102a919b8b2461d1a7b6989e2042aeedf090eea949ee314eeaefd5550ed9e9db6ea20cebae","ssdeep":"","tlshash":"15c012900c862a20c3123481842791a665283ae2827d88a52a3ce3548233096e0a8c5f","size":165,"data":"","first_seen":"2025-07-14T20:59:49.116009Z","last_seen":"2026-07-05T01:28:21.466134Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"18ac997a4794552dd3fa4610f612dad9","sha1":"f29532ceb7c87cab37048e6cfc1166beaa3b1e54","sha256":"fc0d71891f0eea02c4b3bb48a948bd63cbbdb1aa705e13cb9ee9b5f25df0e3e6","sha512":"da33c354a3cb294a8838512f936d6b5e64f5f5c7cfc99c1800ccfa3ca512fc7adea22326c44a33a045072af01f2ddbc5ea41f29d4aefdc42f9e7b040ba5de0a2","ssdeep":"","tlshash":"55c02bc408c22900c3133481c036403721342661807d48a4263ce350c133046d15cc5e","size":136,"data":"","first_seen":"2023-06-02T17:08:53Z","last_seen":"2026-08-02T08:07:45.838512Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"923844f0a32839f36691160fc42ddb16","sha1":"e206b93ab25ed4a02d7664f308a081650df5b95d","sha256":"8b6d5c04fe79a8a8adaf0fd573705ef1fa820fa08521e2d561e5195a50d9680f","sha512":"b540f5b07175a8c41c0ec7cd73f963cb4dbc66f9c4d6baf46102c2c2d2abdcd85f757f38cc23a5fea24a4a9dd2ccaf474eba2fd65cbce2fa27544953b77fbe5f","ssdeep":"","tlshash":"c4f08caa1efa16a71527652f44ae0121aa1a104b9c097e353a8c31046fdd20ca6bcb28","size":634,"data":"","first_seen":"2026-03-11T03:07:58.946421Z","last_seen":"2026-06-03T10:59:34.302099Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8b5eec18717a8d68d09dcc2310b4ee7","sha1":"1f715ef1cdf8e50d75542792f1f71497219485b1","sha256":"39a70fa6e59b652767821313a37a873c197222ba636397ed064d4c9a3ac539ed","sha512":"638f69520d313481238332be0a788dbe91e34ecb316f7584fd81d9b3b192b03e849f4438bb788a1e7dd92197c307585fac557ff5cf1e4f0123a4e1891ec2fb09","ssdeep":"768:2sPo+G8NqwGYAI1HsDtb2F7xLd0VnLduc1HSx6OwmVZh59RfYnPtJbLqLCjnC:iErE2FFLGuU1KhxPoC","tlshash":"53130ae973dab17283ef11b650fb4606f3395894680e4428f719d8ea382548d41f3fba","size":42476,"data":"","first_seen":"2023-08-24T23:19:39Z","last_seen":"2026-08-07T07:53:13.677986Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-13T13:53:24.447057Z","times_seen":49004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d8bc027a7bf4c91f68977f4adb649aeb","sha1":"82c3083c1796dc1f05f8f4e00e4c2158b4d56329","sha256":"48561bf772de82456babafb030cb14cbd36d1df838a537e1e849213ad93d3832","sha512":"07abaf6c4c6e00577cca7c3a1442146bcaf97a0213771d6bfa5adbbaed6c41537ba992fa4b80fbdbbfcb7c6e6ed54c06a0f4129cb438df3f91c21228f1baa35c","ssdeep":"","tlshash":"e8c09bc458cb5d00c31b3a95d1365c3b713c2661e1bd84691a3df3549577116d15dc5e","size":144,"data":"","first_seen":"2024-10-11T09:02:16.41319Z","last_seen":"2026-08-13T05:15:41.742952Z","times_seen":1708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6568f6d60d701ddb9fdfefa8b7485dbf","sha1":"34cfed25d061231c8f8dce81bd588fee720ad270","sha256":"2e29ed2de7d05dbe8e7fc1a10b7f024ce2a312b9a2dd303160f3f724137f67db","sha512":"34249fc7b344a667daa154f880b19c7dba649e1811b0178f30297dc453f8cdf5e88d77783a916da59e90c89fdc925540af6d82211da154f8b896168f915f48b3","ssdeep":"","tlshash":"39c02bc458c20904c30b39d0c136983f32381a60c07d486b263ce394b433016d04cced","size":149,"data":"","first_seen":"2023-07-09T01:36:23Z","last_seen":"2026-08-13T14:25:37.968306Z","times_seen":2262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4a2b0b4b8def347812f148c9eb4c0e0c","sha1":"da70324c25d4f9504e2d9fe4223d09f23799b1f3","sha256":"2f15477aa77dc2a4ea1df308ccf9a795d7cb57a45a27ca53e28879c296ed7713","sha512":"f180daf213dc367f1a2b1855a48b2fef378ba730821b4d9d8ece8f70981c28c94d9f1ac4bcde07b12c44a7330403a50dd2335bf555efada6b5084b7ab5ca7ce3","ssdeep":"","tlshash":"f7c09bd458c65900c2173dd1d136583f623c5a65d17d4466263de3949573116d15ccee","size":138,"data":"","first_seen":"2023-05-17T12:49:57Z","last_seen":"2026-08-13T07:26:10.132845Z","times_seen":4918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"da0e6c6002fb2119a36e05f5688ac536","sha1":"7231d02fc48522b603e68ca7476b156e097d476b","sha256":"2fc80478a709d39ed928155323ec79196298801ca2ce4f0bb74687e4d0e57641","sha512":"a401f3cb7bc1d3301b20369b0dcc753390047cf699ee0e7b216e7f32e8c0cad837f94a42501f1b3458c27bc1a26ecaef1ec96e0d85e241f1035004988d15af5c","ssdeep":"","tlshash":"c3c02bd418c21900c3133481c036403721342661907d48a4263ce3908133007d15cc5e","size":136,"data":"","first_seen":"2023-06-02T17:08:53Z","last_seen":"2026-08-03T02:35:38.105652Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c26c98ccae30dc2f05258300d0bf7de6","sha1":"95df04678a6c5ef509bf3805a04c950d5c6c4b67","sha256":"491c9ee65cab695fbc138183c1044792bdba1da7f0479361f0f6e0a9d6c618fc","sha512":"e12945bc6da9f0f759ec9f037e860e7f7d34d0c4bfba8bfa0628ecd73f1d24fab19da03320771bd78758c5a72a98637cc4e38acd94139de331f61fc664ae348a","ssdeep":"","tlshash":"b2c0129008863920c3123481882791a6a5282ae2817da8a5263ce7548237086e0a8c5f","size":165,"data":"","first_seen":"2025-07-14T20:59:49.109542Z","last_seen":"2026-07-05T01:28:21.451821Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef45aabaf830ef58753fbb006451e484","sha1":"25e32fb69b1fb17af464fccef979ce1be43f8f60","sha256":"de52b1b8b4a03a16549aab03d38fa8e57533d8ef8c6c3493ab89a4e4e5f1989c","sha512":"a094ac5736a5cc4c1307cf5b623ea84418c135d6413a426fdbeb2f3d5f88de020b2bf1f18e661b6f9918cb08352072a64036e80b56d92888db1b1c6366a3fd5e","ssdeep":"","tlshash":"62c09b3d6f5614714733f555773e734559b604432441dc493d5d4f8e0f5559800b44ce","size":153,"data":"","first_seen":"2026-03-11T03:07:58.96889Z","last_seen":"2026-06-03T10:59:34.302881Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c0f9aa6746b688a6c5eaff95529fb9b","sha1":"42574be13de30e912ad498c5eddc76803d7aa114","sha256":"5e943127343691a9b640d959bbfbdeb742f4a99e0ebc17a4fa77e94654e5318b","sha512":"5504104ab41f3deb83c23781b7b473898cf58d61ccf9731e48d1b74e5ed5c2b2a0edb18957a59d97ab5e8d69d5a4cd159b63e36f419a939a34d3c7adad55d55c","ssdeep":"3072:gWKfpuglS2YFH9Bm+Eto8KpL7Gtfme0MbPO4L+9xOOj6l1U1XM2i4LQyzqimHG+k:JIbUiKpc1UCslqlHGp","tlshash":"658472af8fcd269f4c56e7881a4bb0501fed93bd331a8d12768e963bc252416dcb3611","size":402312,"data":"","first_seen":"2026-05-28T08:46:49.99329Z","last_seen":"2026-07-29T03:50:46.462349Z","times_seen":311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0ca95a30e3e378d6412fe9f626f28a66","sha1":"f4d13bd71e89336c74671ae7aa0d5db71d6a6fb4","sha256":"aaf0a6a1fc89578cdd9114d441aa5c2c68808b400a5b28f87d30848d2ef9ed86","sha512":"6a986c81129b71d9a7b52a1f354f825df3b9826183650fddb9a6d2aba1ed170ecc48b6dc2b783ab17e8d320a5d9ceaa50fed854ad7a734053da1f615b41ec199","ssdeep":"","tlshash":"84d02b4d848d0b00c12935b7a494482501360102e12cf02026295314603b209d31dd8f","size":250,"data":"","first_seen":"2026-03-11T03:07:58.95797Z","last_seen":"2026-06-03T10:59:34.269399Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9a84210b4972d184d71b4356ad4dcc8b","sha1":"6bf3931c3afa98728bc473d9daa69bf4faa68bdb","sha256":"acccf90a776730e6802f2e78f9fb0e6e345da6b413ed3d95b843b428c45ba7b5","sha512":"6181fd2d8ed92a84595b54e4548b3a709e039e6cc317de950f920d65904ffa9e478bc90eb21ec6f8cab05ca01821f6f53f8bdd689eba160b577bcaede9ead197","ssdeep":"","tlshash":"c8c02bc40cc21910c30b3480c0354077313462a3c17d88b4263cf3508233116e05cc9e","size":140,"data":"","first_seen":"2024-08-20T12:46:38.843225Z","last_seen":"2026-08-08T04:47:51.130551Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"89665bb113dd2df3361e79e8a0bec68e","sha1":"aacf8f2d4bd72a2113db186dfa1df410b5b5b08e","sha256":"ea4269a0e742434da7b3fef3a59c85b2619b77d1a1eb308ef9f84318e67b052c","sha512":"dbd126c28ceb40da32b6a3225b96e7f0f1fd2889d1e730ceff24f6bf35325e22f6ff62e1abd2be561926fc29874392e3c4a3d3a7f71e9107efb01f9d4e6a84e7","ssdeep":"","tlshash":"cdc02bc408c61900c3133481c036403721342661807d48a4373cf3508133006e15cc5e","size":136,"data":"","first_seen":"2023-06-02T17:08:53Z","last_seen":"2026-08-02T08:07:45.809572Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"09e8924cab0120389e06c33c9c1aac33","sha1":"00f3d764fb2bbb1a1c4b00e41e912c28e26d815d","sha256":"f271411a13b1734c5e0b82c0dc2bc1b0b08c405b20ea1e5df6fe22bfef46d6f6","sha512":"1440a68b74e20d06a620686cbe1f669ca15eb239f1735e6520586b60dc5d4a366737a8ab120f4cf11b79e5ee0b1d0b3742f69a3f906addedbab1e00c8dedf021","ssdeep":"","tlshash":"8cc08cd058c21d20c30334c6c03a5476313426a0907e45a8263da3948173027d16cc6e","size":152,"data":"","first_seen":"2025-07-14T20:59:49.112715Z","last_seen":"2026-07-05T01:28:21.446408Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"454503bfde079c5b583a1e1ff6790d71","sha1":"7342e223b5b3e467d2a67c4f9e01eb14d6aa2116","sha256":"387e4a94897b9303ea60f4b42cc711e65b239c2b0696aac6d6e8485db120c426","sha512":"f96fd7b4aba4a89be02b84973c27d47c6e3167111c7d640f5a107a8061c91c6b2251fa8813815b7501b8b059bb9d0878ae0b3db6c8a6b5668553e1ec245f09f3","ssdeep":"","tlshash":"3fc08cd048c31d20c30334c6c07a5476313426a0907e45a8263da3548133066d16cc9e","size":152,"data":"","first_seen":"2025-07-14T20:59:49.09778Z","last_seen":"2026-07-05T01:28:21.452465Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3642f7b855bcbd84483bf1846c46370e","sha1":"eefca47ce370ae8c599ba0826693161906d64c8e","sha256":"7818b72743e31497ca01236f4c1137b8d46bd51b3f2781b171151701d1bb6bb3","sha512":"7c3ff2a0e45d346dd6bbecc8e7c745b456ed0d2f56f87787aa460797b1d6c6e04be28cfa7fee514ce0bb13221182d94063e7553974847fb7cf4b8820978cf078","ssdeep":"","tlshash":"c7c08cd048c21d20c30334c6c03a5476313426a0d17e45a8263da3548133026d16cc6e","size":152,"data":"","first_seen":"2025-07-14T20:59:49.10395Z","last_seen":"2026-07-05T01:28:21.462716Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9a476c587d021cf0792b29f94efdb813","sha1":"e7097b9cbae4368a4fe9cc31cb1a6124573055f1","sha256":"2fed4d07c54cff9e3d53870da19be21fda0c1728672dd7485d1e813fe55b40a8","sha512":"b0907bb26f3c3f92cb69a71d5a46e0171a5a6e1b8bf2628795f599ce27e907113ec763e75c66572f366293355cb7c7dd0427fb4fcf49c8f57eb8038bd98e522b","ssdeep":"","tlshash":"1dc08cd00cc62930c3233481c83795b661383ae2827d88e6363de354833308ae0ecc5f","size":165,"data":"","first_seen":"2025-07-14T20:59:49.119165Z","last_seen":"2026-07-05T01:28:21.445547Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"942748c84698cb8cb5e7136daa60495f","sha1":"18baf2833a05b2972f936f38fb478e8485e40c2f","sha256":"f104d99eae3b63464720d5ef81b3035d8a8e778bc5b72ecfe2d71e28ab2eace4","sha512":"f6ce117eb11874a67828bd9934e2e147b243ab6e4a69fc3256e72aba341532303036794115ec33d574d5646e9fa153947d4f67add17f3a8d66fd3fa33e8a22e0","ssdeep":"","tlshash":"29c02bc408c21900c3133481c036403721342a61817d48a4263ce3508133006d19cc5e","size":136,"data":"","first_seen":"2023-07-28T13:15:04Z","last_seen":"2026-08-02T08:07:45.817731Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"de6600041cfb3de4032173bd51a9c9ef","sha1":"3153b5e8ea5afbf877559e9cfb22abf053d88a67","sha256":"56c50620ef331f4845b4447136067fa823884a0e580a3cbd8759da899550cc69","sha512":"799179ada9660425851368c00018ce7b8fd4b9e52fbafcd4f7aa7ddc4de1489a0bbc62f28960334f1d6d806d6b1cd70b6b4243fea505deb6f95ff1a7ce16a927","ssdeep":"","tlshash":"62c02284088e0a00c12a3592c130a83272380262903ce83126289314a03700ac209d8f","size":182,"data":"","first_seen":"2026-03-11T03:07:58.954748Z","last_seen":"2026-06-03T10:59:34.312686Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6e943f3e2a0715d2bc9f5fa863ab2c02","sha1":"a09b0896a60f73948f178e6c33c8ec58fa324a47","sha256":"eb26537f423db9ee442be71dd2b3f42b94ed5f98b43fc81000612d8b791f098e","sha512":"0ddddcfaaf735d1a888ee33a7a9e4816e1b3e36ab3907d91e03773ad32331c2fb00875be81bd64c09fc8b2716e891dccc2726d65e252004805cb212ba3fb57a2","ssdeep":"","tlshash":"84c08cd048c21d20c30334c6c03a5476323426a0907e45a8273da3548133026d26cc5e","size":152,"data":"","first_seen":"2025-07-14T20:59:49.113641Z","last_seen":"2026-07-05T01:28:21.450628Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4f79257b522aed89e9e9eeb4cae82f87","sha1":"7b2baa6ff5b93b619f809e11665fb6900df84464","sha256":"16ce6d8b4c42ce09a5c87de5a6b6e205f05c13e5d654331a9577d2d280be7ca5","sha512":"15564233212e276b538b0fc1bfd0811d96fa1586890dd0d48da7476880f859d13e1b8fef2a4c655e69a3c40c1806bb871fad8c543a940d086c0a92fc3dd5f6aa","ssdeep":"","tlshash":"0dc0129408863920c3123481842791a661282ae2827d88a5263ce3549233086e0e8c5f","size":165,"data":"","first_seen":"2025-07-14T20:59:49.122114Z","last_seen":"2026-07-05T01:28:21.437766Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3641c44d28a2cf6606172b57d09a1e60","sha1":"3a0de91031197487996a0dcec204daa8c11d2dce","sha256":"f12ec9797bbec73318a13e28e378ac074c37d985ce2ffb28ce6e89099d421070","sha512":"a237c7f4b08e8237543438c65ff44b24bbf8fbb3819595556cc36cb23b8f88f29bb9b2ac3bb842b05821a71397719d7b577e8608d63d4daece68361744ad76cf","ssdeep":"","tlshash":"c3c09bd458c67910c3133591c13654776134376591bd49a5363de3549533156d19cc5e","size":136,"data":"","first_seen":"2023-07-28T13:15:05Z","last_seen":"2026-08-02T08:07:45.791653Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"8f8fc0120995b435e21a11c0ec157828","sha1":"932a69218d6db8d1008df357d3edbb76013da69d","sha256":"3a0347a16b23f9a041acf6e78675cb508b11e15ec91d233696c599b76d27009c","sha512":"73feb1903851952a4aa7861b4d025abaee251a43d341ed0ea696a4a53fadc666ba9939589217a1ae3c5d1f4a8da96daf82935053604d332e885dec4dcfa43a85","ssdeep":"","tlshash":"33c08cd048c32d20c30334c6c03a5476313426a1907e45a8263da3589133026d16cc5e","size":152,"data":"","first_seen":"2025-07-14T20:59:49.101975Z","last_seen":"2026-07-05T01:28:21.465157Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c6a6b3902c8e8970ff6a97ec96d79251","sha1":"4e93e02e5dcb3f55e80075e3850b8129dedac970","sha256":"af0aef6911bb609fbd698d02bedcf2c4fb0ffd5a0df64b149cfc3971a856d1b7","sha512":"3ee9eb7e3129889f2b780dfba0367d97031bbfd6892f982dabecde7fc84a8d4d2b0e1cfd592d09344a1b1589eed1dce70319186bdd07063c49d07847a7799575","ssdeep":"","tlshash":"5ec08c9088c20900c2073ec0d1364c3f232cae24c17d44672638e398847300ae18ccee","size":156,"data":"","first_seen":"2023-09-08T12:39:05Z","last_seen":"2026-08-13T07:26:10.136522Z","times_seen":3919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoinvestment.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 551428\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T13:52:04.906685Z","times_seen":258009,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":139,"dns":1,"connect":28,"send":0,"wait":29,"receive":40,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T10:56:53.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jun 2026 12:56:51 GMT; Max-Age=7200; path=/; secure; samesite=lax\nwalletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jun 2026 12:56:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-length: 6304\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":37524,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9c0125e694fa834b76fdd209cbfdc331","sha1":"d18a9f162ed29807643bb13376c7e853a9e9f779","sha256":"efbcd2b612fe00a32ba65feb6caac9185f8cf6dacbd3455c8f19a0e05d4eee89","sha512":"1ef7875b65ee8b23110195221de1a18d9c1f84edca7399e52640913bb56abc2a4536d7d68caa8be9a74481efe3d76cf0c872406f0db1945c13012ae3cb36ea43","ssdeep":"768:jQ5lgCSHnNb1jusbMSipLspaIdwOxeDv5aQP:jqe1jusbMSYP","tlshash":"4df22f3871c0253a51f7d2b3a6226f95ef6dca47c65b9a98b2ac53831ff6d108c07a50","first_seen":"2026-06-03T10:57:38.753134Z","last_seen":"2026-06-03T10:59:34.265547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":53,"dns":14,"connect":17,"send":0,"wait":146,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 52\r\nlocation: /lucide@1.17.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a05e2c7e3a2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":29,"dns":3,"connect":5,"send":0,"wait":42,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/other.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /other.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 345211\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":345211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit colormap, non-interlaced","md5":"c1580915f40519a317c6896d0293d57a","sha1":"ac8aab0c052f4e8bf9cb511973af98a55b8b94aa","sha256":"cd177f18ecf630c9cc3d7f60a6c30af11d8cab5bf7479f973940c14d307850a0","sha512":"75d43555805051cd5efbf3fba5759c488f7cab2f4e09822bae106a83762aa1eefbfd3bab8e4e863ffbd8d2dca70c94bd0e5d55a874bb3bfa517aef33d0dfca69","ssdeep":"6144:Y2r3dOHuuxeFtw9zjTjv1TEqjbD3HKCNDUamc4kYgA7u+MNZ9MytN8clJ1x:YS3AuAeFt0HT7tdPD3HKCuIsuRfltCcX","tlshash":"b2742360f49be898d49bc519de26dea645f7c0c0b11ecdf9edc208d526def1a8204c9e","first_seen":"2026-03-11T03:07:58.899713Z","last_seen":"2026-06-03T10:59:34.256039Z","times_seen":8,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/images/bitcoin-icon.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /images/bitcoin-icon.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2691\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-13T05:19:40.660154Z","times_seen":25933,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/images/ethereum-icon.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /images/ethereum-icon.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2780\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-13T05:19:40.589196Z","times_seen":23271,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoinvestment.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 551428\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T13:52:04.906685Z","times_seen":258009,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":211,"dns":1,"connect":53,"send":0,"wait":30,"receive":19,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 03 Jun 2026 10:56:53 GMT\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-08-13T13:53:24.52706Z","times_seen":15690,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":249,"dns":1,"connect":29,"send":0,"wait":48,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.13.0/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/alpinejs@3.13.0/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15837\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.13.0\r\nx-jsd-version-type: version\r\netag: W/\"a5ec-H3Fe8c345Q11VCeS8fcUlyGUhbE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230172-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1917975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FlvlHmRX4ASGC7f98h%2F%2FYw5TSbUMrDTd8ish0W8jRQDTRkcs1EmlFJ%2Fd%2FdQKR%2FJlyNYaC8UMSb9LjgwDH0BhNQvdcTEonOQU9DOZtR2amyQnPKcaKteCRW5Onv7pUMcIEg%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a05e2c7e2e495694-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35848)","md5":"d8b5eec18717a8d68d09dcc2310b4ee7","sha1":"1f715ef1cdf8e50d75542792f1f71497219485b1","sha256":"39a70fa6e59b652767821313a37a873c197222ba636397ed064d4c9a3ac539ed","sha512":"638f69520d313481238332be0a788dbe91e34ecb316f7584fd81d9b3b192b03e849f4438bb788a1e7dd92197c307585fac557ff5cf1e4f0123a4e1891ec2fb09","ssdeep":"768:2sPo+G8NqwGYAI1HsDtb2F7xLd0VnLduc1HSx6OwmVZh59RfYnPtJbLqLCjnC:iErE2FFLGuU1KhxPoC","tlshash":"53130ae973dab17283ef11b650fb4606f3395894680e4428f719d8ea382548d41f3fba","first_seen":"2023-08-24T23:19:39Z","last_seen":"2026-08-07T07:53:13.677986Z","times_seen":138,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":21,"dns":1,"connect":3,"send":0,"wait":10,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vhhlv-1778775055415-ee1be01c049f\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1709155\r\nlast-modified: Wed, 03 Jun 2026 02:11:42 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7f5KCudOhUcdLXZSCZ5f3R4Cz8Jq0QRnOzpJPyI5KZOESjyAYhjU9%2BgNjqlfmMUV0yypIC41c5nJGfZb3%2F%2F3MfiwvQY%2FJ7jjBXhO5wj%2FE08XYeAT1qgRXWGtYlvbw3KjKKLVxo%3D\"}]}\r\ncf-ray: a05e2c7f1a745a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-13T13:53:24.447057Z","times_seen":49004,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@1.17.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /lucide@1.17.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a05e2c7f2d660883-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 19628\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 03 Jun 2027 10:56:53 GMT\r\nlast-modified: Sat, 30 May 2026 02:30:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:XpQxJzQ2kam2QNlZu/vet0L0qZ4OvBek+nfpRlTlMYs=:\r\nfly-request-id: 01KSPTTME4GJK9K5TP660K95S4-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65369)","md5":"5c0f9aa6746b688a6c5eaff95529fb9b","sha1":"42574be13de30e912ad498c5eddc76803d7aa114","sha256":"5e943127343691a9b640d959bbfbdeb742f4a99e0ebc17a4fa77e94654e5318b","sha512":"5504104ab41f3deb83c23781b7b473898cf58d61ccf9731e48d1b74e5ed5c2b2a0edb18957a59d97ab5e8d69d5a4cd159b63e36f419a939a34d3c7adad55d55c","ssdeep":"3072:gWKfpuglS2YFH9Bm+Eto8KpL7Gtfme0MbPO4L+9xOOj6l1U1XM2i4LQyzqimHG+k:JIbUiKpc1UCslqlHGp","tlshash":"658472af8fcd269f4c56e7881a4bb0501fed93bd331a8d12768e963bc252416dcb3611","first_seen":"2026-05-28T08:46:49.99329Z","last_seen":"2026-07-29T03:50:46.462349Z","times_seen":311,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/features-bg.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /features-bg.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 825394\r\ndate: Wed, 03 Jun 2026 10:56:52 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":825394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit colormap, non-interlaced","md5":"8aa6a58ee32e07022aeecf3facd6d654","sha1":"3a05c3082ef7e69102e1c507bedfa5ae517767d5","sha256":"8f0bac4c7c976795bb06820d9923f2a6046503e8abc65d906cdd66102d278376","sha512":"785ba346833fc961304f8415cc9bb9cd64fc668bf1d2bc1f63d6ced5a3d5050c5a40d3e280abe47431675ae49fa3c1e26f9305a0eb23ecdc7112fb75babd4fad","ssdeep":"24576:MHk+wfUV1zt1+nQ9ueecq9xAYDmEw1i5vfP4:ME++Q1paQVeRfA9k1fA","tlshash":"8c053390c15e6c4acd05ab68d902938cce3b64d442f6c97cbf998cf5931ee11b6d258b","first_seen":"2026-03-11T03:07:58.917401Z","last_seen":"2026-06-03T10:59:34.258302Z","times_seen":8,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/hero-bg1.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /hero-bg1.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 463751\r\ndate: Wed, 03 Jun 2026 10:56:52 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":463751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1501 x 904, 8-bit colormap, non-interlaced","md5":"a3af93c6c007c145688203ef61ba0d20","sha1":"ddf79fe817be72c52929f49674b7d6352b3f4b83","sha256":"d129a0d17460773d77e409c245e4d5fad8448c81d83d25ac8263f2946bc70bed","sha512":"e7b1a5ef88f27d3765cb5242b0fc11aab0520776a29c83e67683959b882c056088375a08a725a3dcb5f9e67089f1d0e0afe23c37537cd39d3821b7c0d9f81de8","ssdeep":"12288:IfnTKY/GY9lK5BbXcnEAHx/z8bXLYZgp/c:I+U9lK5BbXcHRwL3E","tlshash":"1ca423d8442743f83abfe18f3d47ab409f56d58afde22f81ac83c9a676d945891e8110","first_seen":"2026-03-11T03:07:58.893926Z","last_seen":"2026-06-03T10:59:34.257216Z","times_seen":8,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoinvestment.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 551428\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T13:52:04.906685Z","times_seen":258009,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":230,"dns":1,"connect":46,"send":0,"wait":40,"receive":17,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoinvestment.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 551428\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-13T13:52:04.906685Z","times_seen":258009,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":229,"dns":1,"connect":28,"send":0,"wait":50,"receive":16,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 10:56:53 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::ngwzz-1780483556041-3c32c68c1430\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 657\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqwU%2B%2FvnfNG7HGWB8z2iI7sMv9zZSUhPToWn%2Bg6dW%2B5ExM7vb3CHQelLf7HUcNXp%2FrysSfaCSU8h%2Bg5T1yXUHGnu4zGcsDyxmzGfYPkYEZWrEhOmfvkYPWJ%2BntQWNFIzdfqmL8M%3D\"}]}\r\ncf-ray: a05e2c7e2f685a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/heros.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /heros.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 207106\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1099 x 666, 8-bit colormap, non-interlaced","md5":"dc24f146727401f165bd9e6f5e08668e","sha1":"8440d7439a58626216b63fd1ee9bf20417876ff9","sha256":"7b19498cc1881fd7dd56cc65e45c8e40bd7dc2e787311529cac196e8bb0fcce6","sha512":"f3aa4b3c8c3b1834109639b4331b748e096018510ae7e980789d29670e7b735586d3edc266695b787e50d33c8f02bdff8d85b0012e1d0cd5360c26b8517b036c","ssdeep":"6144:eB9CnhnwdTeEoVFV3CPo/4si6m4AyjlPPMy+:eB9Ohwd9yFV3wsij4jZl+","tlshash":"dd141287e7e83444c1d4a59d1ad0f61808d78a64d2b1f6df3afb7fa12a7140c91c2adb","first_seen":"2026-03-11T03:07:58.896951Z","last_seen":"2026-06-03T10:59:34.266965Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/uploads/favicon/1752840994_default-favicon.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:54.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /uploads/favicon/1752840994_default-favicon.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4063\r\ndate: Wed, 03 Jun 2026 10:56:52 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4063,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 175, 8-bit/color RGBA, non-interlaced","md5":"4d7460a2fcb9aab0f091c3b2e8bacd84","sha1":"c19d6862bdabd2b20bac0dd448188d0ad3890964","sha256":"3ac7e2422f5e97c36bc5cb708c520cb09d06fab0dc7cd311f45639576cba1f97","sha512":"474e063cfd2fab716e68460ef34198631c267fc579111b66e45b8ce2d96c400d475218bbb013f80aff43042c48da30704cb7b8d46452f3689bf598f7f620dc6d","ssdeep":"","tlshash":"01818e9d5931891c6ab4641010a607de5e13cc36f88d8bfe6c067d755c88d9bcde0d5e","first_seen":"2024-08-19T14:16:27.218157Z","last_seen":"2026-08-01T23:22:32.259981Z","times_seen":76,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/uploads/logos/1752840994_rlogo.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /uploads/logos/1752840994_rlogo.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18475\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 967 x 305, 8-bit/color RGBA, non-interlaced","md5":"95d27fc37137c967ab5b141a96a3dba2","sha1":"c1e7d17b5c4a2e4b58f670318182b8e94b142502","sha256":"8cd4b55b5ced1b7f656cc4fee26c59dfee493d2aaa487dd20188e097b620348d","sha512":"85c188dc978e672ec90191afe5d86241a8c0c9c6e3fd84330f21ed69c1e86998ef1fdf857fce102d679bbe3bbd7531a09ee288543e233dd298e363c76e28e680","ssdeep":"384:OGQt5uRbD9bvPS2BzEs3Z3S9wo3I8klHv9rXwdjtd7QiwdU:OGQW5TKyzEs3Rcwo336v9Lwdj77QPU","tlshash":"dd82d12dcab9ce5cc5d441b197d36df30f491571cb8e373a89c1b22c127a0ac359a68e","first_seen":"2024-08-19T14:16:27.177549Z","last_seen":"2026-07-27T08:05:14.975628Z","times_seen":155,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoinvestment.cc/images/solana-icon.png","fqdn":"cryptoinvestment.cc","domain":"cryptoinvestment.cc","tld":"cc"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoinvestment.cc/","date":"2026-06-03T10:56:53.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoinvestment.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 22:38:31 GMT","end":"Mon, 31 Aug 2026 22:38:30 GMT"},"fingerprint":{"sha1":"1A:52:96:D2:D2:4A:5D:77:D2:96:24:DB:55:DD:35:5E:03:A2:10:0F","sha256":"D4:62:7F:E4:CB:C8:09:4C:D8:0B:1E:49:BD:D3:9E:84:C4:DE:32:EB:02:4B:FB:A1:FE:AA:14:85:AF:EF:64:D4"}}},"request":{"raw":"GET /images/solana-icon.png HTTP/1.1\r\nHost: cryptoinvestment.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptoinvestment.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBiSHQxOXpDcVppVDBYWjFCTzVyZXc9PSIsInZhbHVlIjoiOVV6SDNZSEw5Z0pGd21iRlk0YWpKLzNmVjZzU2VYbk41Z2ZmanZ0NmxibGcwdThJZkU1a0hYV1ZraUlGT0RRQ2FxN2xZa2l1SmdrcVpSNUtjTGxZS29oYW9EQnpJYjdkZ3ZqQzZycWJEcmFVWTJ4aU00UmxBamlOYndvY0h5ajEiLCJtYWMiOiJkMDJhZGFmZTEyMjJhYzdjMDQ4YTgwYTAwZjY5YjU0YmI1OTczNmE4ODQxM2ZmNjY0NWZlOWM0YjQxN2I4NDJiIiwidGFnIjoiIn0%3D; walletpro_session=eyJpdiI6Im13US9HaGl2SStMSHByYmMycDBHOHc9PSIsInZhbHVlIjoiUkR0N0lwRVZScWUyUEFxRDVLM3g4UlV0Q1Z4L2xJS2lIb2F4NGpOUjZQd1pIL3Zzd2VrcFJlT1pnaGpKa3U1cUVlTE1vR1hDRGN6VzN5OUJVQUFrZk5NMmJGODNEWmRDSVNVU3R4UzFaYjJhVEhtbjNyb0tGL3YyaXBrUmhlYnciLCJtYWMiOiJlMjhjYmIyNTU3NGU3OTYyZmMxMmFmNTBlNGY2ODJmZmE5MzI5MWJjMWEyYjk3NmFmZjI4NjMwYzk4NTE5NDhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 10 Jun 2026 10:56:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 May 2026 22:03:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3759\r\ndate: Wed, 03 Jun 2026 10:56:51 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-08-13T05:19:40.620287Z","times_seen":3408,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"cryptoinvestment.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
