{"report_id":"87e3ddc4-771f-4712-9942-ba17e9c6d742","version":6,"status":"done","tags":[],"date":"2026-03-06T19:47:48Z","url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"title":"Fidelity E-Trade - Home","dom":{"size":42909,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"dd1ea7660ea803c0df825641a41a016a","sha1":"8e824f1e9367a7e2b4c35a6a935bbc0f28baa556","sha256":"ccdf2446a58d3420f82931821f2fae79da7d88316f942cb304d56d249295e646","sha512":"009828000ca8f325dd06a123f2f13479d97574b564e594fbe52350255deefb75a89f3677f8b95d09e64f433001815da2d1b3ada9f4015275a2f35ff19a937959","ssdeep":"768:4j08FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYW1:4j08FYTbfsTO+LDCPKHshqa/XOl6r1","tlshash":"0e1395176780462c9c5392a8f399a54ea32df684ef6359eef7c63410c2d93ff088b456","dom_hash":"domhasha09e2b964037d2360f8d1ddedad10bc0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T19:47:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.fidelityinvestmentprime.org","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-03-06T19:47:52.361165Z","last_seen":"2026-03-06T19:47:52.361165Z","alert_count":76,"request_count":76,"received_data":4609330,"sent_data":90047,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-03-05T03:50:59.985758Z","alert_count":0,"request_count":3,"received_data":324406,"sent_data":1429,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":6159,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.72.154.187","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-03-05T03:32:56.152791Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-03-05T03:10:30.689575Z","alert_count":0,"request_count":2,"received_data":25263,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-03-02T00:01:13.072612Z","alert_count":0,"request_count":2,"received_data":37002,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-04T21:57:05.946745Z","alert_count":0,"request_count":1,"received_data":18555,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-03-05T03:51:01.073919Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-04T21:57:05.878487Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":95700,"sent_data":2188,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery.meanmenu.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e1ef9e05e97b31d5a556ef896a5e4a","sha1":"0ed4f5e751b41717d032e6de923298bea258c362","sha256":"b65c7d6040a61fcac73e3d80fa612af9cb600262fe5dbdf1afcb2d9730692a7a","sha512":"150fbc53180786725abe38255daa02b45bbaf017f5f4fc3c8e64304253b88e4f9c1b937111cf1d642fc4901570e19a9cbebce5d7e475314bd010b2ff5f816266","ssdeep":"","tlshash":"9d810062b57084fc24bf64e6f43ee33636f7a40af44ed400b07aa9b63425e941063add","size":4027,"data":"","first_seen":"2023-05-10T02:54:21Z","last_seen":"2026-07-19T16:31:48.188647Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vendor/jquery-3.2.1.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T23:09:05.179398Z","times_seen":98109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/owl.carousel.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"88d0fe722f04973e2888b58a63aa0570","sha1":"f947512e51f8ef4b15bba3f701de64e53a7f7f9b","sha256":"e0e2bc4e1d3ee5024c4e1aa58a6cad9aa42fc63a8c89ce18013a1c8f2b94875c","sha512":"f425865c5489fbf5f42d6cd2442645b0e3e149f9ba8db9cbf8ca6aa34a3c29ed9262bf2b093a9be3fc069bef67d771ed0c4d4d4290043ab31e703670e055d01a","ssdeep":"384:SKwx0bG/ON7gum0tQt8RYgKpJz8vYHpElIVombV:y//ONetpb8QHpEqj","tlshash":"afb2a54bb2242345069372b9419b110d713bfb78fc41855c70badadfaa4b84e9277b3d","size":23890,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-07-23T18:26:02.922723Z","times_seen":11059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/wow.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"161ba788d7ca4d554b4a0c609ce2cd67","sha1":"4ec798a81020992a75f08b37584fb5314ac8516f","sha256":"167d7ca784f3d3948837ea87c90fae712a158e7f34d02fc8dcdc091aefa62c7f","sha512":"1366d1965793c33869d80ecd65e138beacac426a465ebda14d81893a9c05ee1bf9dd5fa3b2ec353b05155a3723da8e99d25ee7bb20fabbb86de37111916aecb6","ssdeep":"96:zrZgL1xvPV6GqKyR6TYLWHFMLJAMpOROVEE1fosvGeaMozHImBaoqbl:zry9PVfSFrlAnROVEEdos+eatzHILoA","tlshash":"d30277c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8426,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-07-23T16:27:05.192684Z","times_seen":3067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/echarts-en.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"218e59ce9830779fc1a0ee71d72c85fc","sha1":"05e68392e87c9fed6dad06828321c8429e198a98","sha256":"4d3f81c64289c739536908c6967b2206e70eae833dcfe9911a66d9a499560284","sha512":"114c767e4c96b23cb34c124f6b3844a58d811d26b9557c45e018a27009750396517812f13dd315beda32c3791abb5c5a844804383c6863d7f1ede1ea6459715f","ssdeep":"12288:AdzOUk4RqHmf2lGNDPcrX8p81Lp0O5wW1W4txnVzvJWp79MLnQl:Adz7k4sHZGYX8p81Lp0O55ztbzs9MLnI","tlshash":"fbe409acb644742642e371b4446f150b91362449b50bc998ff6ad9caacbc58f323bf3d","size":666113,"data":"","first_seen":"2025-04-28T11:07:48.50853Z","last_seen":"2026-07-12T09:18:07.99554Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/tether.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4addc615e1906aad0cb15b5440d794a3","sha1":"d34f1f7de9a90bb18855ee82d17a979451ed5f83","sha256":"d5c88d31b9e65ff1a15b7c237c495c5c2a92a692c2ada646f3858354f6c9ac2c","sha512":"adf846344ca643f534ad04dc15ae4d3892cb406293d47e65bce6433c90a97e03f24a39ba84db5a3c2c29c3ab06c341e6524a9b14dac0a6f221734659d3f956ac","ssdeep":"768:1Jc67wdFbgSo6h+T7zMczQvoK/ww8l31g9CZQ5nAgM:zn74bFopz+AK/wM5Af","tlshash":"9fb2d6a8725170b681db5263907f930e7132c17463879054b63cc9f58db8d8e62abf7e","size":25005,"data":"","first_seen":"2025-06-25T11:59:30.667338Z","last_seen":"2026-07-12T09:18:08.061669Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery-ui.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"471a3bfaa847c808869a4d1b5d17da1a","sha1":"95d2695be48b0b2a1864155c165dad4b8d629bc3","sha256":"26e676621b0cb95c7299fac3465ee400c1fb5855fd62d112a19fb2c16b07f2dc","sha512":"15e09720f349a9da035a658f5fcdbfc2384665e027ead5b86e01f16e12c8d12f027659edc1d706e311d9c08f58eea284d78aaad23ecc66101e5c5b4c4de02e01","ssdeep":"3072:7kqBNnLOBjG0qwOO8D5BnAcKcv15i+VXMS68ay91XaSD5sV1jK:ZLOBClgc/KDS68p","tlshash":"a044f84d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253668,"data":"","first_seen":"2023-03-10T03:06:37Z","last_seen":"2026-07-12T09:18:08.039296Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/plugins.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9804c7bf8abf3f5d12e8c4c3aee800bb","sha1":"971c69aa6cfb6501146930d199ecd43d34f1d065","sha256":"ba7e001a1400281e75bad35572d8b4ce6631b1d0a978a3d98e232545a12941ad","sha512":"5c610ed4510b2f88ec8bdd22973cc26c88736edea594838ca88ad9365b6e930dcb39b41d5f182bee17d7046b64a00d75d9c07a3e6b84aa28dab9000fda4c7e01","ssdeep":"","tlshash":"325174496b95a52101df723cc46b1f09e060909bfe1ae0f9745cdeb80f61b7081af2fa","size":2803,"data":"","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-07-20T05:02:16.159759Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/videojs-ie8.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ff9bb22f0b1789ac170247b0825488f","sha1":"f2b1471c6b72cef3df20d2b16fed14739c4831f1","sha256":"3cea9fd4486e2820f34fdeb7970fd29c4fa531e79a285bf58aaab1ecdadfa99a","sha512":"e652a92efd0bd5bae4112367190f37a90afebea175ef7dcf6379fdc407679c210bc58b0b6dc2d9f5f77cc070369842027a88c921646847c6a6557361758a9098","ssdeep":"384:ZnnOiAY468YruWC+awx/HtjQmQQGf+gii+wrFOQz2Qdk/m4qC7rnKBNMF4ZOKH9D:NAYyYSwx/He6d/PKBNMU9m+","tlshash":"09c2a78476a1b0a592e63590003f550bf239dc79f8aca8e0f195c4f17cb4d4696bff2a","size":27279,"data":"","first_seen":"2023-03-07T12:03:11Z","last_seen":"2026-07-23T01:31:22.777037Z","times_seen":930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d7e4460c35171e1bd9dd5d81a11fdfa","sha1":"1f95d0b39d09baee382e3df6752bc008696c6fac","sha256":"19dde553eae1b035791993f709a2ec0d3b48e461e0025d59432c49b13783eb82","sha512":"6f16ee829024a06e2ef469d6689213e58497f4b50d1942292eb7b51739f8b30f3f833dc5605be4f58b5df7f3a41a424ce674d63bc5e7bb72a81a8f263155da96","ssdeep":"","tlshash":"70e0f83d3c30409417a600b481bbe23c3d0a30b08088c907acaacc3a1cf0fdebe069a4","size":418,"data":"","first_seen":"2026-03-06T19:47:58.762938Z","last_seen":"2026-03-06T19:49:52.098588Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-07-21T18:21:33.824623Z","times_seen":2966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery.easypiechart.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7659bf9331da37b14e8315f64ab77aca","sha1":"2c9fcaf675595b7ab0ab12fb8bc23f7bb0fa9564","sha256":"b2db7e12704dcb41fe79a96a7eb08f816e25a16dd4fa97bb26e6618789e0cb8a","sha512":"0c735ea5b22eb3db787ba6283014892f097e9e79b4b48c0c0689ec410f96f4d28dea055555ba2626cf488b7990f87cc666253917224b767033f5aeb766066f4d","ssdeep":"","tlshash":"348193c6b161391950236579807f920b322764f9794f4c68b72891be3eb590d227ff3a","size":3950,"data":"","first_seen":"2023-03-07T12:39:25Z","last_seen":"2026-07-22T07:37:45.765421Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a72d25082d7e5ea402482b47b3ed14","sha1":"457d69e8fe7837c7c6a44130285be5e86e4f88e2","sha256":"d4fdb81fac4508f0515e822f46b015dc0d5dcfa77c68badf1867c65ae7bbc207","sha512":"13d8f382370318934e109495f737b467b6d98d150a28f366ab4da8f1d30fcb0c385c25c3f745f261f75b7833a219ac420ca9b94da41a7e9ea46005041f4f2b27","ssdeep":"","tlshash":"eec08c0a10346cbc274e320caa953e40943804b815203d28b3eb82064bc6003474a503","size":163,"data":"","first_seen":"2025-04-12T16:55:02.103647Z","last_seen":"2026-07-19T06:16:17.064599Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-c5ThC_K-.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd469aa001be1dfd30d0962c705391c","sha1":"87b8c021a1232a7ba7cd2d482113782215313b9f","sha256":"df06e0821c7c9aaa47dc040afcefc59ff8743c8beec02bed3ce656cfa9163020","sha512":"1c344e4bea46a7c81544ced75a2c75c38aa64ad7ddf395c1a0beb293373d339fbb4aea0b0b13864028be791060a40eb12d557d01c7e13169264712b416f91304","ssdeep":"6144:AsJU8SN+jtxjR/ZgQub5/rLmPh+WVcq9kNp:AwU8SN1b5/rL+HV3up","tlshash":"5e544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283561,"data":"","first_seen":"2026-03-02T08:25:26.037318Z","last_seen":"2026-03-10T05:00:21.849653Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/stats.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a18d9a11cbd79f312087c3bcc39ee310","sha1":"0a40100a2b292a486882bcd64d90cfdd7c50454a","sha256":"b1c6652e0d103519c9201caaac1d19064b28e664e655be5f5c6c0164c1995600","sha512":"b1d1b8038526820ae142daa2584e17be5529964554f57e7ae87dfd77b4b7760c10d94285002ca83ff183b5eea523666171399888c34d32b1fc1951adf0239dc6","ssdeep":"","tlshash":"12312448a6b0b6d29ab1349a78de98c3b4611975682bcd0a40fdc055eca5d49058eb8f","size":1855,"data":"","first_seen":"2023-03-10T14:48:17Z","last_seen":"2026-07-12T09:18:08.005988Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/Youtube.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"93195cb8fc7d3563e794c324465e9f6a","sha1":"90ec2d713eaa6365edc463cec1daadc6395a96c4","sha256":"06820c101c846dca9541f27b45ba4a77bba52edd5d3d60799a10bc0b6635eaf1","sha512":"048fdb5523d27afa831dc9008e1b03a6b8ad8fbb767f72b2171b99c3c0b3dede4f97d6724c46f201a051c1b606b6a35069b825a7179aaea4694fc54ff8abf938","ssdeep":"192:Y8gmvE6B3tol3TGxXeF6hAiVpQ/5RFTS820SWzeZRDtpzqujWx:Y8gmvdIl3TiVpQ/5RFS8SWqZRDtpzqD","tlshash":"4a42a70d2654929a44ebd0e0ac1f010cb175e2ea9585816df575ffeceebcd0a407fab4","size":13020,"data":"","first_seen":"2025-06-25T11:59:30.661467Z","last_seen":"2026-07-12T09:18:08.01458Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/1fc62019/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e52aa0ebc4c3eaec9b5dc3fb189816ad","sha1":"deee2067e9e36617f997fb3be3788432b87129a7","sha256":"e9abd0d74c5ecca848c706e3f94780a00efc33f66f1a7971ded040458851fd69","sha512":"c1274aa8cacaa39f2724cdbc73acff36088115445878ed95e4fa62553cfd35475d5db1266b5dafd3e71fc8fb645baa6837f84de0478bee8848cd8e1969b94099","ssdeep":"384:LZ9f+ec30st6d53jPj6ANwSYpBZKjTfPXRbiNu44mHQP4Ia3zPw5BWngmurjtF4x:LGMws5vZqjQj7BO4G3IaIgurjtcG12","tlshash":"0ce2c6cdbbb1b4314373a5f5902f100fb23e586eb4088999b284d8e16cf59694627f7d","size":32131,"data":"","first_seen":"2026-01-29T12:44:11.570685Z","last_seen":"2026-07-11T04:57:24.138665Z","times_seen":25164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/echarts-liquidfill.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d2ad7339533b387c00b112ef7d1d752","sha1":"531887bb37d21955c170820bbc184893fd7fb363","sha256":"0c22012c7dee36e1a23e3211f0d72336169e16f45523364f248a3c2324c87b64","sha512":"abefb99ef64d9813f1be9a2ac9e380a79b2b859cff8d27492799e3ea0007bf199923fffe0aebc1596bf2c47a1bf9bbffed470f4902470e6320fff2c459f214a3","ssdeep":"1536:321fcFRLWZ7CaRbHBJRCtv98rspkagnxL0lPRK:G1GYuaRbTRY+B5","tlshash":"28b3f8d87288b02943a35274446f214be13b7a09750ecd94f72ad5cabcbc58d52bbf39","size":117983,"data":"","first_seen":"2025-04-28T11:07:48.492318Z","last_seen":"2026-07-12T09:18:07.984824Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d6310c5954ac3c086e56010a4f0099b","sha1":"beb3adc544bbbec77b332ddc6545dd6d47d34393","sha256":"1145401465968ea7a21aa36b1e56836f9a4b00605657a9dca17a30531839f378","sha512":"dc44284060cd51850046a0bcb8c8590f267b164780e27de159c48678574fe611d640aecb598c0faef3e8108b787daf573c5ea056b5a6ea8ecb53f7504747926a","ssdeep":"","tlshash":"f411cb7b3d84e679865894f4a03fc31cb1b224957c51cd9110cee889e65caca9d2d5ac","size":993,"data":"","first_seen":"2026-03-06T18:58:32.893737Z","last_seen":"2026-03-06T19:47:58.72715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/CanvasRenderer.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b420ec629bc1534ea32fa984d505dc40","sha1":"56db2efd90f4d657472c66bd15ec3dfeec22654c","sha256":"7f27d86f904da002876b8ef8b02e3ae6af10ccf99b17946b2b15126588bbc6cb","sha512":"e2dfa2562b017e8e30f9791265c601b28953f9ba3a2bd2552d90c9c7d2696addf761ed4855e4390e66c5ee622eed78b07f307de76273562cc8def2dc6f050ff9","ssdeep":"768:+bcxdPXXlu3+tipnjjFq03WuDCpXCe/gORCg:+bcxdPd0pnjjFq03BOR1","tlshash":"4ec254a8a77d724f162e711d511ac088a77ce06b8601d5ffac0c426819e362893fef7d","size":25811,"data":"","first_seen":"2025-05-31T01:51:37.432781Z","last_seen":"2026-07-12T09:18:08.031981Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/three.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63c57535e134f21ccfef14a0f19407cf","sha1":"f3b5904e7c7af25c444337e723f0eb67b10175cf","sha256":"f40cb583a8fee81b076893f613e64e0fb0ba7f8a7f5593bc1230d4fb5a855564","sha512":"470028fe0c6c0190c94fd5a4d046d26515dde8b9f81923ade5864aca470ce629020195167eafeb5e2a74cb813691067c0053e698c295307496c99ca2d63156be","ssdeep":"24576:F1Zdia9KJsour1OxpcgUqOUqIn0EvDJa+omRdQvCjKWJItd5Ls:Tia9KJsour1OxpcgUqOUqIn0EvNa+bRd","tlshash":"2f35d7c56bbd111eca273298956d10c9a53c9877a10584bfbc1ce9ea58e083c837ef7d","size":1071493,"data":"","first_seen":"2025-06-25T11:59:30.656279Z","last_seen":"2026-07-12T09:18:08.064195Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/Projector.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0ca8d67a365d5082b5dcc4340e9315b","sha1":"7781a5d088c723b68da499b645dc143a23ed25f8","sha256":"de80859053200b4e1c03d918715beca3fda2421367019ba08af39ce8ad968ad6","sha512":"2f4ad1d346ceea6c6c71f67f5f34fb31dfa2b62af4fa9921c47194b2c4d5503cb54fc1fcc637ea9e2749f644034acbb5af5e57a57d39952d085a038d622745e2","ssdeep":"384:gViDsE5YW8HEcVYxeE5zhGZTyfRZTo55AQGspr6nBhfQZb6a5DSTUFayQSmYz7bI:gViIQVIEcVJE5l7Q516nfsbdmYz/xEVh","tlshash":"eea261e4576e995e4d3bb358d41948c4e17c90b29400e6bf7e8cd8b169c183807befea","size":23132,"data":"","first_seen":"2023-03-10T20:08:11Z","last_seen":"2026-07-20T06:30:30.267503Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/smooth-scroll.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f8e7caf6c8e20c70a46d09408a6e5e6","sha1":"9b8deec36d290156ed5f0eb35b420713fa1b3a85","sha256":"73533a19a59294f7b1938892bb28b37cd1a2272a959de3c1757faadedfee578f","sha512":"f34e596853d0b327fef857695b972cb46d7b2200d558908ba69b6f8597e93fbe0215fabe26b5ba8fdb6034d8eec4e95d818eab48c3a61db64234530047ba06dd","ssdeep":"","tlshash":"5c71bbe53910b0764af791f5a82f534aa335c651344e5400816dccd22c7cdbe90f7f5a","size":3503,"data":"","first_seen":"2025-05-31T01:51:37.379315Z","last_seen":"2026-07-12T09:18:08.042627Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/bootstrap.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7b290eb457738f20d2341ebb764789f","sha1":"608c30854d7ee9e1b3acc27e32d7267b53537a38","sha256":"4635187907fff87cff8287d3bf6b46f641542170e7921ce3c6ccb36264b0df19","sha512":"439289555cdb2946af85b3927d81c5215c1a99b6718a4fe1ac34083710de86523418020ce8a643a2f973b321674ef00425cf8b2b84f70d6b9ec80ff46063dda8","ssdeep":"768:6g2oEy7P5alWbrMAD/r5oyAoxUJxmoz5zOtpjnqZY0WUPnkoISarEj/l5Jl46Zl7:Z3EUBtbrd54ftzcnv/MXJl4+l1v2u","tlshash":"db33840bb7f22062576bb0a58e5f45087235492fa64bdc4c3c6c92e06f6583855bbfbc","size":50397,"data":"","first_seen":"2025-06-25T11:59:30.65386Z","last_seen":"2026-07-12T09:18:08.056984Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/mod.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a79e64fd24b01da273ce1e385d47ed2f","sha1":"9fc3bb9986d902824e16803f782a2ab04c3cacfa","sha256":"70c401cdf3c9bb791433dddd9523c4197ed51d693d73989d1af0fb5f72120a20","sha512":"a54c7adee0d17a52da3c9d9fb9d1fbd8adf3338befac27fc6e27f5dbcbc6122b10c3ac1ab48e196d8c8b10f33f0e3fc317e5b545163ac4da4c510ee5e9a999c3","ssdeep":"","tlshash":"83f081c834780978e99f905b6067195f71f829db3400b6c0b59cdb2d4f75d21a5c75cc","size":646,"data":"","first_seen":"2025-05-31T01:51:37.4918Z","last_seen":"2026-07-12T09:18:08.006549Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vendor/modernizr-2.8.3.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa31b73aedd668e9ab4b706b79b9cb2","sha1":"f543cb4bffc7525eb65fd7bb0d9fb6faad5bdf5c","sha256":"d5448f267dc6b4a999e770b3438b3cedff09bd09f606028a8e031c46eb90caff","sha512":"6a8db463c38a9ba3b89e1eda35f540a43622189cec098b165e72ea5a279c49dfde8be57f9651a9235efb26218995b212f4dc1558c44d1ba65e1adaf7205ffcf8","ssdeep":"384:AEDDCHW519TpJGd+xedmAnx6KQoZRY5y60Hh5pD:ACDtjecAgKr25y60H5","tlshash":"2562facdb153b1168397607a61bf460ff23e9899a8184854e059c5ecbe74ca8473bf1e","size":15524,"data":"","first_seen":"2025-01-06T16:40:49.922215Z","last_seen":"2026-07-17T15:18:04.165979Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vc_round_chart.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ae3362ee0683081b617e0af326a7d4a","sha1":"a1145fdb7f0b69079ddb88d958073df13b595c71","sha256":"66084728357a56cef8f76c30e1b67639826c35f0a431567767e8b817e21be765","sha512":"c2bdae710ba490352168d556e5a30b1b02c29b81eb779c9a48f0e837a21fdfc2f11301ba1deab4acca252bae646b55423590c4c2e6a48c427c6fd99dd67dc1d3","ssdeep":"","tlshash":"ff31ebe5f1202caab2a722ab462f7399d323b17d0e523109715094fc492a81f353aa3d","size":1657,"data":"","first_seen":"2024-11-15T12:33:52.384084Z","last_seen":"2026-07-12T09:18:08.024345Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/video.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"647d4c22d6fbe8941186b2001bf49d53","sha1":"e15a33a5b099648fbc1208215a3c1104666ee705","sha256":"f6f9685a8224763d2a745399f4b521661e46fd262030124833ce0485680eb007","sha512":"defec4676ce99f05c00422b240d129aa3e3ac7d0ae98d6c6853a8541c861d3be1f1e2e288250a3b4bb5522380a5911b71693ecdddcf1a2aa18681429a7dc1dc3","ssdeep":"12288:v5hjAxEMjK+CJuwnnp5iXIlP3f3CkabJ7bQKe7n5cDFMnhfF+E323HkLIc0p7kaQ:jjAxEMjK9tywabJ7bQKxjkLIc05k1Jbn","tlshash":"4de4d84975f923b1446360b8178f61c8f238812f511ad988bc9ee7e81fd5a3447faee4","size":708812,"data":"","first_seen":"2025-06-25T11:59:30.699376Z","last_seen":"2026-07-12T09:18:07.989774Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/main.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"845084284aad8f35c61d78eefc3cc915","sha1":"8b80c4639a5808a97517a9b989e4a76fde75f43d","sha256":"7214c8f7cb772c57f1cf531beef1b5ab648ee6438c28876c981467e4fb91c551","sha512":"87be9aeeb6cc8fd7891fa2680fd35bc448d6b4c1f15c232aa6776183702dffc77e6205326b4248c3a59bd3dc49d39a8b4bb3eba076b4591c6d01204c74a1fd39","ssdeep":"384:f6gNl2ouCFJeZQ67LZQ67PEoWS/5Hs5DZKpUGJk:S4l2ouYJsljBkZKp/k","tlshash":"6b524344ef6c1161203bf27a967f2240ea3c50336d059c68bd7c89681fd856e93beb6d","size":14143,"data":"","first_seen":"2025-05-31T01:51:37.446608Z","last_seen":"2026-07-12T09:18:08.043786Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:27.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 02:17:46 GMT\r\nexpires: Fri, 05 Mar 2027 02:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 149381\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-23T23:46:35.087158Z","times_seen":250080,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":92,"dns":1,"connect":21,"send":0,"wait":23,"receive":22,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/assets/images/logoIcon/favicon.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 14 Jul 2024 21:16:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1575\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"d32a9ab58e8cf677f31e11e629654979","sha1":"fbc061e729f5b122e085a78c49507591ad4602a9","sha256":"d182cb983e480310167004f964508975f85e6c97d23b31f685b331002ea96f71","sha512":"5f7572a14607690cc6bc231bdffd4e5a86052617b01aa00ac27b0677e70ce58822d3866c63aa7dd43d2a5bf0d49ae4c5110773adedf2b12b31550d015d20033e","ssdeep":"","tlshash":"b231e7dff205711e488daca02291cbb33e0628e5ea57112c8168e309dfdec7d2446e1b","first_seen":"2025-06-25T11:59:30.688346Z","last_seen":"2026-07-12T09:18:08.010263Z","times_seen":16,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/animate.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3988\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70824,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d3ccf779936eba398a67c290f6ebfb42","sha1":"ec7949d1375f27c2dfd35df4bad80449f52a7072","sha256":"2f44e16894d98604375a790448f4aad765c148fee23b878971496c2ac5374f9f","sha512":"6159a55d279928a7ef1f920f6004d431bb0f2489d45b896f7f4f1132591845c982792311968b7d44ede513327c21a28cf57990079d8913203dca7737f27ca68e","ssdeep":"384:xzHuaubH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVrib:ZHuauqfqftulucfwfk+1fHf7SpS/fjfp","tlshash":"e3631f6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-05T14:01:52Z","last_seen":"2026-07-22T05:50:55.406537Z","times_seen":641,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/4.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/4.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1484\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 49, 8-bit colormap, non-interlaced","md5":"85bf4373f2c22c935bd0c3d9941a7004","sha1":"22bdf94525528311014e57305fdb4d3c9d67a132","sha256":"641fb3ee73da500704719ba4f430b9bf752b56f0f4e5a7d017946087b1c84388","sha512":"ce0452b75fd656eceac76e1b9c1fc4cac702d40a0ee66ea59598fa3cc7699824a4f5273c6a3739c9b3e60d786c6ad8a9c931eeee2e1232534572772c2a6838a0","ssdeep":"","tlshash":"0731c4eed7755eab61023e0aaa5a1422a60b8e0c8430c505002c7bb89ff3ca2c405302","first_seen":"2025-05-31T01:51:37.509097Z","last_seen":"2026-07-12T09:18:08.0622Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3143,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/6.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/6.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16444\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 107 x 40, 8-bit/color RGBA, non-interlaced","md5":"feb24020a110b19fa8bfc5d5b97626a7","sha1":"ae979a4164e66abfd0b877e14c48376732f8e374","sha256":"dfb8dd3f1a19b729688f05bdf9f23b60c061e5687b36f0efc89faf7f4a75b697","sha512":"d24a1a8024e777f79078772f1252d511fd78ded1bd55dc57302195c6673ff4d895daf82112121e43d245eac682f27d0f2ad22d6818bb664031fee9dd288c6f16","ssdeep":"96:dsSdkEWRJxNX8sc5RabvkCcYCG+hBnTlhbXx1rE:OSdktrrjb05Y","tlshash":"5572c264bcb27265966da2332ec524058c3357c3c9828c49fbcc6c6a7f00bd8ac0f6d6","first_seen":"2025-05-31T01:51:37.48266Z","last_seen":"2026-07-12T09:18:08.063064Z","times_seen":22,"resource_available":false,"data":null}},"time_used":4214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/mod.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/mod.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 06 Jul 2024 09:37:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 263\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":646,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a79e64fd24b01da273ce1e385d47ed2f","sha1":"9fc3bb9986d902824e16803f782a2ab04c3cacfa","sha256":"70c401cdf3c9bb791433dddd9523c4197ed51d693d73989d1af0fb5f72120a20","sha512":"a54c7adee0d17a52da3c9d9fb9d1fbd8adf3338befac27fc6e27f5dbcbc6122b10c3ac1ab48e196d8c8b10f33f0e3fc317e5b545163ac4da4c510ee5e9a999c3","ssdeep":"","tlshash":"83f081c834780978e99f905b6067195f71f829db3400b6c0b59cdb2d4f75d21a5c75cc","first_seen":"2025-05-31T01:51:37.4918Z","last_seen":"2026-07-12T09:18:08.006549Z","times_seen":20,"resource_available":true,"data":null}},"time_used":6101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,300i,400,400i,700,700i,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Lato:300,300i,400,400i,700,700i,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 19:47:26 GMT\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5473,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e66768eda810920697a1a019093a55e5","sha1":"001c5b34d05bf9f6d6cd44380c447299752a566e","sha256":"d2fbbb3b75e99d3934df22a8171aefab4059651105bfa8df0bd89e7594da8fef","sha512":"8cf16f4aefd56c6a3fb83a4c537be43e7769509c6d1a97ff5174efe1c8006d80676275de5aa4af9c2a57b0103e6a7aff23d316c45a4acbbce351ee5cfaf6f50c","ssdeep":"96:HYgW/pJc+u7YgW/jNKYgLUJc+u7YgLeNKYgC/KJc+u7YgC/gNKOWhJc+u7OWSNKi:4l/J3l/lkw3kip/i3p/jR6E7nx5u77QD","tlshash":"feb1c092096fb508db930dc212da7d32ef0fa25064459835eeff14d8bc93d6a9362b0d","first_seen":"2025-09-19T03:03:16.886645Z","last_seen":"2026-07-22T07:34:10.177556Z","times_seen":948,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":98,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/assets/images/logoIcon/logo.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Jun 2025 14:34:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 314561\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":314561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 360, 8-bit/color RGBA, non-interlaced","md5":"a08aad4169c3bf22d3bc0e0f0777b309","sha1":"6861e9a8abb77d6acbcf05319381af9d4c2de351","sha256":"b6697a32742aab23b2c0f948a5e237c5c48e90bd99284b17ba18b242d00081e5","sha512":"ffc0682c4038ffad9b881790481d94e7ec703f97d9cb0331fb14e72f11aa7a9c73835be66abe7b56b80ca90e847bf57aacc5dcd1aede45e6f213b1cfcbfa633a","ssdeep":"6144:BtROPS0jDezmhOJxZH3CMfuIqZGaJQ2daJ5ac0tbBkyMbSP3827O:BKPS0jDeA2ZH3CMmILp2daqtKydS","tlshash":"fb642369362e5d842ef3b78d174e70ffc298a11c8e8f6ddd5147592238a15bef0324a2","first_seen":"2026-03-06T19:47:58.685086Z","last_seen":"2026-03-06T19:49:52.029045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.72.154.187","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:33.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Yu9fUaTEU2kAZcW0LVNnLw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 06 Mar 2026 19:47:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: kqJovcT+h9rx7JIxRKedd0hIzZI=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T23:51:00.658435Z","times_seen":17488026,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":88,"connect":108,"send":0,"wait":22,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/5.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/5.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1748\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced","md5":"c9604a25be907ee4905628106d40adf1","sha1":"5463c4ebd02f8c2f06128f06ba1448e21c5f0f0a","sha256":"49d20f9eb4c076c92b294771918d2a857080af80e81b4c190cfdaf00decd3de6","sha512":"5862827831bbf9f7be4c6e80871b93ddb687569cd1d120a9e9a541964022ca33f9fcf2f375400c7ee8097a8aee6280085f13093a34db1cc7687906680dd07cf9","ssdeep":"","tlshash":"cc31085494357cbd6bf40aea62bc0e34967a32ea68d3ac048fc941f5c38970454038fe","first_seen":"2025-05-31T01:51:37.46061Z","last_seen":"2026-07-12T09:18:08.057491Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/main.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3554\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"845084284aad8f35c61d78eefc3cc915","sha1":"8b80c4639a5808a97517a9b989e4a76fde75f43d","sha256":"7214c8f7cb772c57f1cf531beef1b5ab648ee6438c28876c981467e4fb91c551","sha512":"87be9aeeb6cc8fd7891fa2680fd35bc448d6b4c1f15c232aa6776183702dffc77e6205326b4248c3a59bd3dc49d39a8b4bb3eba076b4591c6d01204c74a1fd39","ssdeep":"384:f6gNl2ouCFJeZQ67LZQ67PEoWS/5Hs5DZKpUGJk:S4l2ouYJsljBkZKp/k","tlshash":"6b524344ef6c1161203bf27a967f2240ea3c50336d059c68bd7c89681fd856e93beb6d","first_seen":"2025-05-31T01:51:37.446608Z","last_seen":"2026-07-12T09:18:08.043786Z","times_seen":22,"resource_available":true,"data":null}},"time_used":5246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:27.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:53:54 GMT\r\nexpires: Thu, 04 Mar 2027 10:53:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nage: 204813\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-07-23T23:43:50.041932Z","times_seen":55193,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/jquery-ui.min.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/jquery-ui.min.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7095\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31083,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29471)","md5":"0ee9323c5306c2fa8087721b0c2d9812","sha1":"65fe09359265b3949bf855c6cd434235c00f5aff","sha256":"fc1ef4412b2caeb52e8235f3eb028714dd5fa5172bd820838d9dd83ec72a730f","sha512":"459e8199a483d924e33b7ce0adf0b01a5ab61fafb9a4b400f7214b5dded9de45e9f8aba7c9c94073d569079c1d44ac4d7875e1844ebf510223873b0d7630e909","ssdeep":"384:UCREnR8lOXH51egBMzymUh+466G0Og6Sc7nfZBhVtQ:UhjXH9BMznUR66G0OgeBhY","tlshash":"52d24330e4c2253dfe33d13061e11ef4523bc142eda25fbda09af65952e98e4857b9b1","first_seen":"2025-06-25T11:59:30.653097Z","last_seen":"2026-07-12T09:18:08.055997Z","times_seen":16,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/style.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Jul 2024 09:33:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10626\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98078,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cfa01f94189462b0fe0158b41c70f4f5","sha1":"8d2239869a8f347852d21c836db5998139eed602","sha256":"56f041ffadf9b20db8342398e3bea345a5f3120cd2cb2d027c9c4878e342fb63","sha512":"d603a84a3ec13f91d2f721c7e5684437c2e6a142092c9df9a8e79d7460ccf7011eeb4ae8ec560e2f78389a9e2a5b057ea0503693082a89c04bd99102a3bfe48a","ssdeep":"1536:hakK6rZwqgYuZphQQo8bZYgK4eDZ8+/zXAymU:hhgYuZTQQo8bZh+/zXAyr","tlshash":"39a399eb26a7390c761bd8965d4557753bec4402a10f9f68faf1b19cdf882884033e9e","first_seen":"2025-05-31T01:51:37.524565Z","last_seen":"2026-06-24T20:05:24.793808Z","times_seen":15,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/12.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/12.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1189\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"9bdc953b698998a0135eebb28e803941","sha1":"b1bc96ef39d105ee0c819ceda317dfb709a18906","sha256":"7b696641fbfeb081530d97d99a0618eafde20da6f7e03053748273b7ee1fea5a","sha512":"b773d6756cb7e4f850fad8b9b6a7c884943fa662ebddbb56a5c2937a50ce19364685c041e01145fa1a51f8b204ac369386b5cc4feed301b48cc3af1809625429","ssdeep":"","tlshash":"57210ad1eca92c564cc184b1f0a4ca28092f21fe21c407bb5d78fdb9590d85c3f08d1c","first_seen":"2025-05-31T01:51:37.448277Z","last_seen":"2026-07-12T09:18:08.025341Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/1.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/1.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3454\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"e4f816f34f01c9cbe5aafdbdb489ee79","sha1":"81e1535cf307a77e1f02a5c5fed0ca13610f388b","sha256":"c08074d0f5675f40774b5d443ac28a7a99dec53dd765f56f26516723bc5ae7a9","sha512":"61b74ba9aa6bb39f87aeed9a8d8ae4385c63652d87dc343e9b7c60bad62870a536dfd869f140714a452f1206353dc0f5875b6edd7f59b0750a47057b7c0ef445","ssdeep":"","tlshash":"a0616d4317c236959e629921633cdfdd93722b4b7568834faf3ee162f90271a60d3029","first_seen":"2025-05-31T01:51:37.486861Z","last_seen":"2026-07-12T09:18:07.986908Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1236,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery.easypiechart.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/jquery.easypiechart.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1572\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3727)","md5":"7659bf9331da37b14e8315f64ab77aca","sha1":"2c9fcaf675595b7ab0ab12fb8bc23f7bb0fa9564","sha256":"b2db7e12704dcb41fe79a96a7eb08f816e25a16dd4fa97bb26e6618789e0cb8a","sha512":"0c735ea5b22eb3db787ba6283014892f097e9e79b4b48c0c0689ec410f96f4d28dea055555ba2626cf488b7990f87cc666253917224b767033f5aeb766066f4d","ssdeep":"","tlshash":"348193c6b161391950236579807f920b322764f9794f4c68b72891be3eb590d227ff3a","first_seen":"2023-03-07T12:39:25Z","last_seen":"2026-07-22T07:37:45.765421Z","times_seen":229,"resource_available":true,"data":null}},"time_used":4197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/videojs-ie8.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/videojs-ie8.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8738\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27279,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27236), with no line terminators","md5":"2ff9bb22f0b1789ac170247b0825488f","sha1":"f2b1471c6b72cef3df20d2b16fed14739c4831f1","sha256":"3cea9fd4486e2820f34fdeb7970fd29c4fa531e79a285bf58aaab1ecdadfa99a","sha512":"e652a92efd0bd5bae4112367190f37a90afebea175ef7dcf6379fdc407679c210bc58b0b6dc2d9f5f77cc070369842027a88c921646847c6a6557361758a9098","ssdeep":"384:ZnnOiAY468YruWC+awx/HtjQmQQGf+gii+wrFOQz2Qdk/m4qC7rnKBNMF4ZOKH9D:NAYyYSwx/He6d/PKBNMU9m+","tlshash":"09c2a78476a1b0a592e63590003f550bf239dc79f8aca8e0f195c4f17cb4d4696bff2a","first_seen":"2023-03-07T12:03:11Z","last_seen":"2026-07-23T01:31:22.777037Z","times_seen":930,"resource_available":true,"data":null}},"time_used":5201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5159,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/12.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/12.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146963\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 796 x 427, 8-bit/color RGBA, non-interlaced","md5":"b9a74705f14930458f3a564e57ab9ea0","sha1":"d691036290ffa0b0c6fa93f6e9d98fd37e8ddb0e","sha256":"fd9e8c086aa29a891f01f5f4e7b19955af47139191c907b9a5f928b5d9460eaa","sha512":"7db2760cd7892c77571ecbf6bba63ba03705827b6e07d3ff1b43550cb57c8265cd8809646e1b99a86a002280f97365ffe66faad25e0cb4ccbc6f2ef66ad777e0","ssdeep":"3072:+POAcepmhdGPNSpb1QCOqNq0cUF9UT5l0MksK9A6EEZCF+D/M:F3eGUyZQCOSOcM5l0MklEEMu/M","tlshash":"57e312ecefb84a467d4f37905fe9da05c2c0f368668eb48a9acb294c3917d0095d44d1","first_seen":"2025-06-25T11:59:30.672162Z","last_seen":"2026-07-12T09:18:08.031362Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3108,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/4.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/4.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17458\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 40, 8-bit/color RGBA, non-interlaced","md5":"66e99bd2a7ad1f0a6f99530d8eedf958","sha1":"d70e84169e98a535b3b139da1784cbf309869bc6","sha256":"8448882b85fffdc55edfe60d532c4aae4c101320ad3ea0d63f4ae8ca3d89fcd3","sha512":"56402db828653000ff21387e59eb1f8e8a906d80b4629dd220aede01f1c4ab379d69408fcc6531c77ae6e94e32422dfc07263ba1bafa6b5644a0aee6d662be04","ssdeep":"96:sS9kEWRhxNX31sc5/9eVxzRjZbfR5ClCmE31Yahg+YW:sS9ktT5eXR95crECqd","tlshash":"c472e534fcf172a6648ee6761dd969065c370b83c682ac41b3cd9c666f10b9d9d8f053","first_seen":"2025-05-31T01:51:37.519774Z","last_seen":"2026-07-12T09:18:08.008476Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2277,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/echarts-en.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/echarts-en.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 211658\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":666113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32032)","md5":"218e59ce9830779fc1a0ee71d72c85fc","sha1":"05e68392e87c9fed6dad06828321c8429e198a98","sha256":"4d3f81c64289c739536908c6967b2206e70eae833dcfe9911a66d9a499560284","sha512":"114c767e4c96b23cb34c124f6b3844a58d811d26b9557c45e018a27009750396517812f13dd315beda32c3791abb5c5a844804383c6863d7f1ede1ea6459715f","ssdeep":"12288:AdzOUk4RqHmf2lGNDPcrX8p81Lp0O5wW1W4txnVzvJWp79MLnQl:Adz7k4sHZGYX8p81Lp0O55ztbzs9MLnI","tlshash":"fbe409acb644742642e371b4446f150b91362449b50bc998ff6ad9caacbc58f323bf3d","first_seen":"2025-04-28T11:07:48.50853Z","last_seen":"2026-07-12T09:18:07.99554Z","times_seen":25,"resource_available":true,"data":null}},"time_used":5205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5122,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/7.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/7.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16708\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 165 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab23d83a1a226b57919579b4eb933ab0","sha1":"961b1473f3a522a7fc21b59e2eba7fcbb2fd43a1","sha256":"f56e4e244971d759e6f7166fb37c016bf3b1e9fbd5a0312938073a08aaba6126","sha512":"a4275634b39be24e230d8e30e3c3c3c48eac2a36e660cc745462f2548848c40f3d777757f8481427a7a262d4ecbd41c5d056d31141a71294cdb729cd579de4e0","ssdeep":"96:6SmkEWRG8bxNXJsc5B3P04z58n0E7xQbWPlkL5fUJiVg:6SmktG8dhc65YvQgBiVg","tlshash":"09721918bc7072a5e99fd8325ed13846aca20a438ac09c44facd5c676f44bf26c5f5da","first_seen":"2025-05-31T01:51:37.436463Z","last_seen":"2026-07-12T09:18:08.059574Z","times_seen":22,"resource_available":false,"data":null}},"time_used":4214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4212,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vendor/jquery-3.2.1.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/vendor/jquery-3.2.1.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29485\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T23:09:05.179398Z","times_seen":98109,"resource_available":true,"data":null}},"time_used":4209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4146,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T19:47:25.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; expires=Fri, 06 Mar 2026 21:47:25 GMT; Max-Age=7200; path=/; samesite=lax; secure\nhyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D; expires=Fri, 06 Mar 2026 21:47:25 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 9654\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 19:47:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":93400,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"0fddea44f15fbcf01e1aba9e6620ea8a","sha1":"75e3ee7bf552a54bdb1bd7b807cf8694c269fe51","sha256":"1401249b543949ed5de1585df1cf282185fa06c15b515f72a6184155178eaf2e","sha512":"fad77f877e1c59b89fb9abf9fe7266f83bbdfe288f4b600a3dfd605c07ac05b36473545794817026a65741ebe8375a7cc5c08bef1e6e524d77dd2aba7dd1dbc4","ssdeep":"384:tAaUpuAX07CF5AcPNb58h5Ac4RZw5uymygxg05AcnCbJrigYkm+uAP/:PUAABVPNa4RZOmygxgonCtmgYk3BP/","tlshash":"0793db7094f05137029b51e32a292b0b6fe1ea1bd82b190876fd0bd91fc3e46df57269","first_seen":"2026-03-06T19:47:58.706916Z","last_seen":"2026-03-06T19:49:52.094847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":362,"dns":225,"connect":65,"send":0,"wait":221,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/logo/logo.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/logo/logo.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4363\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"d2e7c56e0291ebea1de30f7cc80311d0","sha1":"cec08d7441e43613cfd449639b6f1dd4c1542be0","sha256":"9df5fd8a62d56f83c71be871edc38d4644810453205b7e6811c347c616b220ae","sha512":"7ba922d2714aecb371cd5bc5e12cd6b32524a689b819c24fdc577d14edbe6ebcc57b03c18b42528e076288c29a5f5898fecb6846665a3d7cb011fc2423b07dd2","ssdeep":"96:/7Nefy8GbgbYLYXDVDpEHC/p2+b7QUjMydN2ynumN8Y+PaZD3r9ZsCiK:/7ofyPCVDIC/FcUgONJnumNDrTiK","tlshash":"7c917c8f11b7e8ff46a60fd44296c5f1b641c8562af5cf2aa020851e0c65ad260e5388","first_seen":"2025-05-31T01:51:37.36828Z","last_seen":"2026-07-12T09:18:08.003238Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1240,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/5.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/5.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1699\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"1cdcc2657b252b9b9647bc4b5f5232d7","sha1":"eeb0f90433892e2270717dd887f12f01a9ca3e1a","sha256":"7645eb14076845e9a7915b9746b4a66b56a520ada85a3f60d19c4d56bc20acb5","sha512":"13c00f5466ecd262f8b99aebf49092734b9801ffd60765e16490c44c6ea728d909f8419780c9eefa80ea28f7eae6e31b14a8ccf6de4ac71b152c3edbefad2029","ssdeep":"","tlshash":"5f31b9f6c1ad3d25c84091b55709c99dff731d3523eac65f079f3021c0346104866e36","first_seen":"2025-05-31T01:51:37.50612Z","last_seen":"2026-07-12T09:18:08.048216Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3143,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/6.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/6.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 618\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 47, 8-bit colormap, non-interlaced","md5":"3b413c1de34afd30c69baedcba3b1301","sha1":"8b4a04e20dcd35e423ec55736aac93cb9497ff4a","sha256":"8b5da33d232667b2ba0865ea308d3234d7704488383ffc8d6df13a8c1dc252a6","sha512":"6b1fc38e77a5c8bbcaa0cac4dba3f189f378ea928f9556e3750e6394a2ecd6b2e0c66e40b65e19c64c3e499995a0cbdd669824ea8f91964409e66893477f2898","ssdeep":"","tlshash":"aff0a39202c96eddc65e854a318288ec9d6dce676250da21041f7c3d66b132c0158746","first_seen":"2025-05-31T01:51:37.404711Z","last_seen":"2026-07-12T09:18:07.999614Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/2.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/2.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16776\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 40, 8-bit/color RGBA, non-interlaced","md5":"29e54ea1835e2dae29ee8daf178d9918","sha1":"429f812df37bd45e61af9a2500d8f9a16f728232","sha256":"a9d1a7d67f90aa8708c44ec6f539b1e1ce35b7fc8fdf7f971b374584cd69cb8c","sha512":"02169eef8ba259fbcb9c29dffe544dff77f40866379abd088b8f00891a41918c99dd8d3f66d6ac8301e548c9071a8730be8158ebf43801100660e01c947b32dc","ssdeep":"96:nSmkEWRrNNN7xNX1qhqWqcqRsc5LshqvO6bLl/xSJuTnul9CW5gvVJf5y0:nSmkthn9HqhqWqcqahqvOGdxSJual9u","tlshash":"2f721856fdf235e1a86ad2319ce5081d5d6309439ac2ac85fecc0d8a3f11bdd0c1f692","first_seen":"2025-05-31T01:51:37.475835Z","last_seen":"2026-07-12T09:18:08.009638Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2214,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/smooth-scroll.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/smooth-scroll.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1486\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3357)","md5":"2f8e7caf6c8e20c70a46d09408a6e5e6","sha1":"9b8deec36d290156ed5f0eb35b420713fa1b3a85","sha256":"73533a19a59294f7b1938892bb28b37cd1a2272a959de3c1757faadedfee578f","sha512":"f34e596853d0b327fef857695b972cb46d7b2200d558908ba69b6f8597e93fbe0215fabe26b5ba8fdb6034d8eec4e95d818eab48c3a61db64234530047ba06dd","ssdeep":"","tlshash":"5c71bbe53910b0764af791f5a82f534aa335c651344e5400816dccd22c7cdbe90f7f5a","first_seen":"2025-05-31T01:51:37.379315Z","last_seen":"2026-07-12T09:18:08.042627Z","times_seen":26,"resource_available":true,"data":null}},"time_used":5206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5128,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/font-awesome.min.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6673\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30914)","md5":"5cd0f9704ad017f42dc3d97656c52756","sha1":"5eec77689a34e05508e50c159cd7c277a046132b","sha256":"c0c73bf0429c18a7e0e4d357b43851229f16f7017c762ba859bdadec5d93b578","sha512":"a3548c0a064ebf59b6b49f1b8d4e36120f45f5744dbc46dd86d0b9250bc5c1102fbda0e237a257b577b637cdd20dbe4e0f3732d976a851560088947c7cde86a8","ssdeep":"384:vHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:vwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"f5d242e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c5fba","first_seen":"2025-06-25T11:59:30.644923Z","last_seen":"2026-06-09T23:03:31.222811Z","times_seen":9,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/video-js.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/video-js.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15200\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14763)","md5":"01fa42cd65791a0e7befeb5d46875641","sha1":"72284a471633436fe112e139f054193af77d8672","sha256":"dd4b455fd2212c70ff1a69a7d3bf1262817edc7abf45784f02053db300dc8abe","sha512":"9543ca8bb8a1144d3722d6f7da6cc6bb4005d48d12fac2974b55145a1668070970ad62bf6bff8c97b465ae04ccff38e6bf5f463648bd29682c3c21315b6c0065","ssdeep":"768:lsNiPtgGNaGQCMSlARDeZidT7jLaYE5lTgNaxbFFI:lciKntk2/LaYE5lTgNaxbFq","tlshash":"2e43c8b671648ae4113e8440eec29b521f3cf423d995e8dcab932a6ccfda24535723dd","first_seen":"2025-05-31T01:51:37.390647Z","last_seen":"2026-07-12T09:18:08.004966Z","times_seen":20,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/Projector.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/Projector.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4716\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23132,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"e0ca8d67a365d5082b5dcc4340e9315b","sha1":"7781a5d088c723b68da499b645dc143a23ed25f8","sha256":"de80859053200b4e1c03d918715beca3fda2421367019ba08af39ce8ad968ad6","sha512":"2f4ad1d346ceea6c6c71f67f5f34fb31dfa2b62af4fa9921c47194b2c4d5503cb54fc1fcc637ea9e2749f644034acbb5af5e57a57d39952d085a038d622745e2","ssdeep":"384:gViDsE5YW8HEcVYxeE5zhGZTyfRZTo55AQGspr6nBhfQZb6a5DSTUFayQSmYz7bI:gViIQVIEcVJE5l7Q516nfsbdmYz/xEVh","tlshash":"eea261e4576e995e4d3bb358d41948c4e17c90b29400e6bf7e8cd8b169c183807befea","first_seen":"2023-03-10T20:08:11Z","last_seen":"2026-07-20T06:30:30.267503Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/9.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/9.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6611\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 81, 8-bit/color RGBA, non-interlaced","md5":"87832bdfb5ee50ef70801558b2adcc96","sha1":"791d66c74eadd84a19f6f30071aeb835e5ab4930","sha256":"c23632701330eac00509e2c2200a517fdf0bfff46bc05878720338c0024437d6","sha512":"a561ab294ee03b568bb0699c669ea9051f8b96ed508c1df11eaddfdf70c6ca76c0652d85a70f9af598ef2c301a5c27bcd284caa46f44bac8b39e20d11e64d24c","ssdeep":"192:g90ssE7+NmQbAmV2S0nPbqV7Eao0b8WIfK6bQj8hCnb:g90ss3NbAy2AQaymVb","tlshash":"45d1bf8f9cf415aae9d53fb628ee18a8b61316cf52171809c1f00ac859e661bcd236c1","first_seen":"2025-05-31T01:51:37.403076Z","last_seen":"2026-07-12T09:18:08.012301Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3150,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Fri, 19 Feb 2027 01:22:58 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdkgovpzJr8IG6GzSsgWJLc4D%2FabGMBj7ad0F9ifs85lfJAnk0RxLoN8W3kNP%2FA26yCwTYWWeVdGYF13%2B%2BnppjQzCh0NwagauRfBJ44Tgw%3D%3D\"}]}\r\nage: 1362267\r\ncf-cache-status: HIT\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9d83df48bde19e07-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-07-21T18:21:33.824623Z","times_seen":2966,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":18,"connect":9,"send":0,"wait":14,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/2.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/2.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4000\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 59, 8-bit/color RGBA, non-interlaced","md5":"522c97220630e494d5e32f376066aa88","sha1":"989dee1eabfb01939d7bfc5c5ecfe23f39c1a5b9","sha256":"39486f1fe9d006810698a045adc92dffc8d8d93c08dc5bc693d15f2fc86bbf60","sha512":"4de8a5ade1f1e70e98c7d963c562973c07f69a53c4426ab857b986ba786fcc80c2d088f7d5a65388b5f1f955bc45a892d0cb4b906d59db1eb84054a17e72779a","ssdeep":"","tlshash":"b5817de65e83224ef121ea0b04bd3845e9baa4f494ec3c00e259769f080079883d97fb","first_seen":"2025-05-31T01:51:37.517411Z","last_seen":"2026-07-12T09:18:08.015866Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/features/3.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/features/3.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20919\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 423 x 338, 8-bit/color RGBA, non-interlaced","md5":"47464118f3edb7a0eb3ee50688f3baea","sha1":"e65b7651841b4ad88751040d1eaf8192adb2e663","sha256":"eebf9fc8b6bb933411049d8d07461a0e75689ebdddf0f626d545f019e7bee032","sha512":"d1828e552541df13b4060f42189a414fa6928f805473ac0aeef7118fe9ff2c37b29eabfb96f0b039a2b053ec761b49e1a8cb78e8d008131d1d550aaf7ee3c9aa","ssdeep":"384:40tXjA2bXuQn/BEli3Qufu2iIJKjfqjylHLleARqzI0dU1lfFq3u8sXV:7TAY+Qnt9f8I+fqjSLleAR2dUXfE3u8k","tlshash":"7a92e1d988aaf8b0b8065e01d16b218fc317d9ab753f4ad8e7b04173c384239d36994f","first_seen":"2025-05-31T01:51:37.462125Z","last_seen":"2026-07-12T09:18:08.029311Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2203,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/10.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/10.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5653\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced","md5":"e72feba5a49e16fdabc94fe7b610975d","sha1":"5f355384b7f6e9b86d83b646576b885525c23759","sha256":"1b3a24cae4ed97dcda9e1fed7deee36b58006652f9934e1c9e2f78b39811d06b","sha512":"1e0be0b48e53081d8b4f6f4cdc8033ae8f8039414f57363cba5f505fd100724ffdff78e5d3d2738a326a6872286c7a80caa3c1479dad72b58d6ebd3bf165180b","ssdeep":"96:2YKiPNX20tMbb8b73C1kc03W/Aj+yDjQlS30g/evc/AjTL6Oz3lxK:DB2sW073Zn6yQlS30MgOyK","tlshash":"cdc19f0648d4de89d6bb7e4df49f85a0e1068393db2fb59dcca1a1bb6109cd18135602","first_seen":"2025-05-31T01:51:37.480712Z","last_seen":"2026-07-12T09:18:08.007164Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3149,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/Youtube.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/Youtube.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3390\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13020), with no line terminators","md5":"93195cb8fc7d3563e794c324465e9f6a","sha1":"90ec2d713eaa6365edc463cec1daadc6395a96c4","sha256":"06820c101c846dca9541f27b45ba4a77bba52edd5d3d60799a10bc0b6635eaf1","sha512":"048fdb5523d27afa831dc9008e1b03a6b8ad8fbb767f72b2171b99c3c0b3dede4f97d6724c46f201a051c1b606b6a35069b825a7179aaea4694fc54ff8abf938","ssdeep":"192:Y8gmvE6B3tol3TGxXeF6hAiVpQ/5RFTS820SWzeZRDtpzqujWx:Y8gmvdIl3TiVpQ/5RFS8SWqZRDtpzqD","tlshash":"4a42a70d2654929a44ebd0e0ac1f010cb175e2ea9585816df575ffeceebcd0a407fab4","first_seen":"2025-06-25T11:59:30.661467Z","last_seen":"2026-07-12T09:18:08.01458Z","times_seen":16,"resource_available":true,"data":null}},"time_used":5246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:40:44 GMT","end":"Thu, 28 May 2026 02:40:40 GMT"},"fingerprint":{"sha1":"F0:7F:B1:BC:BE:73:55:AD:38:9F:92:6F:D6:4E:DB:1C:05:30:A3:80","sha256":"32:CE:74:34:FD:C2:62:30:95:38:1B:13:E0:4F:A0:DC:0F:1D:D8:44:4D:60:AF:C5:1C:94:AD:15:57:F1:6F:2F"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 21 Jan 2027 01:57:04 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDGL5Pe3bDoj7jPDib5Zbrj3AgEazfoicNDN9qE8o%2FHsa1RY4kSrJ3D9ABqNkC0BJHFLiAIuUQCbs5DLBwgrPFm%2F%2FsEKB9fuH8dI24nTZA%3D%3D\"}]}\r\nage: 3865828\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: 9d83df6f3b6d9e07-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-23T18:48:08.443475Z","times_seen":13351,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CNhvSpp0.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:33.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-CNhvSpp0.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-919a\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJCgH30fwWAAwBuUwKEwH3FwAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: e2f75420b411733b552fab6944336112\r\nx-77-cache: HIT\r\nx-77-age: 1506513\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37273)","md5":"0bf3fa4ae16e33ecf6bae9c7a91c24ef","sha1":"d4c8266daeb1f4b825d4db90f13765f82224b9bd","sha256":"05085b4c6bb66159589e884f0cfe7dc68c3e5953fd10d34941036a47809faeb0","sha512":"9b3769c86553af1f03838f99420120ae72f4284719508d29e96a425f968a885f8fc17f322861e575d209b55245481ad74b230576d7746d1f8ba3a3b950000c5c","ssdeep":"768:E8Ch4TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E804TcCWYtdXjuPF4t2Z","tlshash":"d7f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-02-17T09:27:34.886834Z","last_seen":"2026-03-10T05:00:21.922479Z","times_seen":1217,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/mod.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/mod.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 06 Jul 2024 09:33:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 290\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7bd1612595522f56dcca5a9a85e18cc8","sha1":"7738da2b4c6ae3ecfcdc083c605821a58ae36e22","sha256":"0f5d0b7ac0b50c84e50432be706e01571edb6d47b120aaf1a4904802cb277860","sha512":"932085f768451f69c5f8b949708c76f901f95217bef8e9af6c05a4488158c3cbd1585ba3573b8579571fad2c3f63427dfbb3930905ea3e99fb6bcb73a0996f5b","ssdeep":"","tlshash":"7201495d4bbb1604ea6bc0a81fbe27462319948b429eca047fc16208cf86045d8a3bdd","first_seen":"2025-05-31T01:51:37.485178Z","last_seen":"2026-07-12T09:18:08.005477Z","times_seen":20,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/features/1.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/features/1.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19961\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 435 x 375, 8-bit/color RGBA, non-interlaced","md5":"0c7cfd293aa278bd6c6538ce6d9861bd","sha1":"e7210918297111b437fcd319d077e754edc21cdc","sha256":"efab6997d2c7274fbddc2b39820cb23d2633009951998d683915b07a0a7f7eab","sha512":"a81588f31dd63a3f0d47581fef8a8d2a94d7f5bd193797bf4d9eafee01257678b5857a1e5dc59047701ff3dcd80b4b8d8dd87287a1dff2e1e9f4af6ea2d0ab45","ssdeep":"384:8uEbhXRo5QSEnKaA3sRkIN4/bXD8M7ASWGdUJsy7qpppb5IJR181XCop9uuIGV2q:83w5LcRkINmfc+6P7p8ZCo/uQ2q","tlshash":"da92c0dc07fdb02e5ddc7a614ce6e821ee821d2a051224dd2838a2d7391d691f26e662","first_seen":"2025-05-31T01:51:37.374696Z","last_seen":"2026-07-12T09:18:08.040798Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2192,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:27.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:28:24 GMT\r\nexpires: Thu, 04 Mar 2027 21:28:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166743\r\nlast-modified: Mon, 15 Sep 2025 17:09:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22504, version 1.0","md5":"1c6c65523675abc6fcd78e804325bd77","sha1":"898d9808304dc157f5dcb18ca169ec6e2b96b3d7","sha256":"08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92","sha512":"1505e8496c9bee214c5f8815f8d88a31ffe2baeb6fba81a8228bd52220b9b2bb10464c1e1dba11d6881583dfa478cdfb30a79cfa6f069c362fb65443feb06918","ssdeep":"384:ZbL6k1TUlBxUp5VLlLJGv2VulERzgWuXlY9zehEsapJznPEUAAnUgf0n6iXatBbF:pLfTuYfVVJGv2VuIzgWAlYteh6nPEzAF","tlshash":"8aa2f18a13d7a414878983f12c5ed63d7fac7cc7994282d2a606bc494e3dcb6b430bc4","first_seen":"2023-04-17T13:30:58Z","last_seen":"2026-07-23T23:22:36.762108Z","times_seen":38560,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":37,"receive":8,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/1fc62019/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /s/player/1fc62019/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10535\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 16:25:02 GMT\r\nexpires: Sat, 06 Mar 2027 16:25:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 06 Mar 2026 14:33:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 12150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"e52aa0ebc4c3eaec9b5dc3fb189816ad","sha1":"deee2067e9e36617f997fb3be3788432b87129a7","sha256":"e9abd0d74c5ecca848c706e3f94780a00efc33f66f1a7971ded040458851fd69","sha512":"c1274aa8cacaa39f2724cdbc73acff36088115445878ed95e4fa62553cfd35475d5db1266b5dafd3e71fc8fb645baa6837f84de0478bee8848cd8e1969b94099","ssdeep":"384:LZ9f+ec30st6d53jPj6ANwSYpBZKjTfPXRbiNu44mHQP4Ia3zPw5BWngmurjtF4x:LGMws5vZqjQj7BO4G3IaIgurjtcG12","tlshash":"0ce2c6cdbbb1b4314373a5f5902f100fb23e586eb4088999b284d8e16cf59694627f7d","first_seen":"2026-01-29T12:44:11.570685Z","last_seen":"2026-07-11T04:57:24.138665Z","times_seen":25164,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/1.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/1.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16708\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 125 x 40, 8-bit/color RGBA, non-interlaced","md5":"b678f1de0316527d06094915caadbee6","sha1":"75b3c0c60272455208c8b2a7aaed694b6ab90144","sha256":"b8456c23e3b2a7e446630255742e91d67f2708cc5e212c3517ff9d2faa9713c8","sha512":"d6ddf07af927f521a334f1da048476b908dace238aabd1009cff495f56ec2d37bf675062e54bb24bc3492812d9da30096d869d5c907714be6d7050bd7b43c527","ssdeep":"96:GSmkEWRlxNXiDwC6sc55iFsO8Hj0/fckpxYs5OM+2Y:GSmktf8FsVHw/UkplRY","tlshash":"2e720765ace035a1e49ed6721dc428ce9d334a53aac15c06f6cd8d663f00fd9ad0f583","first_seen":"2025-05-31T01:51:37.449974Z","last_seen":"2026-07-12T09:18:08.053469Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2214,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/5.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/5.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16955\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 41, 8-bit/color RGBA, non-interlaced","md5":"5d625587d2f7d8eb732a6d66fb308fd3","sha1":"b274120f7284eb92aaef35721b085e5c6dc6870b","sha256":"f0f4697520495f056fbf4c66041aefa74e4ef5b105b2667c3a3b9c7f4a3a9066","sha512":"a68f1b194c5a6aab61103cbb4ecf090ce6d783c2f0e9592670792b9df2daee4962335d798b578d172737dca7755b0ba48d92f921a6921c66d9cd8d1d9f6e048d","ssdeep":"96:qSdkEWRRxNXcXsc5Bum7/Z97SgRRT80HzcLQt:qSdktDBm7/Z9BT80HzMQ","tlshash":"0672eb68bdf27651c189e1363cd465465c730b83cb416c88b7cc4855bf00fa65d6f696","first_seen":"2025-05-31T01:51:37.451794Z","last_seen":"2026-07-12T09:18:08.05855Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2277,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/owl.carousel.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6271\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (635)","md5":"88d0fe722f04973e2888b58a63aa0570","sha1":"f947512e51f8ef4b15bba3f701de64e53a7f7f9b","sha256":"e0e2bc4e1d3ee5024c4e1aa58a6cad9aa42fc63a8c89ce18013a1c8f2b94875c","sha512":"f425865c5489fbf5f42d6cd2442645b0e3e149f9ba8db9cbf8ca6aa34a3c29ed9262bf2b093a9be3fc069bef67d771ed0c4d4d4290043ab31e703670e055d01a","ssdeep":"384:SKwx0bG/ON7gum0tQt8RYgKpJz8vYHpElIVombV:y//ONetpb8QHpEqj","tlshash":"afb2a54bb2242345069372b9419b110d713bfb78fc41855c70badadfaa4b84e9277b3d","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-07-23T18:26:02.922723Z","times_seen":11059,"resource_available":true,"data":null}},"time_used":4205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4159,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/wow.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2575\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8396)","md5":"161ba788d7ca4d554b4a0c609ce2cd67","sha1":"4ec798a81020992a75f08b37584fb5314ac8516f","sha256":"167d7ca784f3d3948837ea87c90fae712a158e7f34d02fc8dcdc091aefa62c7f","sha512":"1366d1965793c33869d80ecd65e138beacac426a465ebda14d81893a9c05ee1bf9dd5fa3b2ec353b05155a3723da8e99d25ee7bb20fabbb86de37111916aecb6","ssdeep":"96:zrZgL1xvPV6GqKyR6TYLWHFMLJAMpOROVEE1fosvGeaMozHImBaoqbl:zry9PVfSFrlAnROVEEdos+eatzHILoA","tlshash":"d30277c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-07-23T16:27:05.192684Z","times_seen":3067,"resource_available":true,"data":null}},"time_used":5198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5130,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /iframe_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\nexpires: Fri, 06 Mar 2026 19:47:32 GMT\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_main/strict;base-uri 'self';object-src 'none';script-src 'nonce-rJkPGn8Ln0eyeABbAiMxrw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=d_aQoVTo0ZY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Sat, 10-Jun-2023 19:47:32 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=fWgRCrP_KAc; Domain=.youtube.com; Expires=Wed, 02-Sep-2026 19:47:32 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgaA%3D%3D; Domain=.youtube.com; Expires=Wed, 02-Sep-2026 19:47:32 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPry6-X1l8n3LBDims2XhYyTAxjims2XhYyTAw%3D%3D; Domain=youtube.com; Expires=Wed, 02-Sep-2026 19:47:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"3d6310c5954ac3c086e56010a4f0099b","sha1":"beb3adc544bbbec77b332ddc6545dd6d47d34393","sha256":"1145401465968ea7a21aa36b1e56836f9a4b00605657a9dca17a30531839f378","sha512":"dc44284060cd51850046a0bcb8c8590f267b164780e27de159c48678574fe611d640aecb598c0faef3e8108b787daf573c5ea056b5a6ea8ecb53f7504747926a","ssdeep":"","tlshash":"f411cb7b3d84e679865894f4a03fc31cb1b224957c51cd9110cee889e65caca9d2d5ac","first_seen":"2026-03-06T18:58:32.893737Z","last_seen":"2026-03-06T19:47:58.72715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":51,"dns":2,"connect":8,"send":0,"wait":25,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/flaticon.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/flaticon.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 342\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"55f645d87373eb5c4736e85ef4c4aa6c","sha1":"75fe650982c3d16661d19994bf6f8cc94c613054","sha256":"a4bd642bca0ae430bef26a9139adb6ecd49864fb9950a15f95ff10b646113317","sha512":"139ebbe64496ee543285e510da0e72c9390343d81a30517ea874660436c55507fbac3dc3712d7432e44ee2b3df65bbdc46349345aaf652913cf0c7f87facb692","ssdeep":"","tlshash":"10113d5482a9251157021f4e12de2390ff0570267e80fc17a36c4d9acffacb887e4b1d","first_seen":"2025-06-25T11:59:30.676596Z","last_seen":"2026-06-09T23:03:31.170927Z","times_seen":9,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/responsive.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1014\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"564fc7150927316145f0c5d76d3e14e3","sha1":"c7f3d273b95ac000da97edccadf58ea945f5e672","sha256":"6cf3d15aafea61ab4824304a9322446efbcf988677555112dcb16e13fe0b74d7","sha512":"a0c4133d2afd5c9ece3afeddd57052cd13ccd1dd834c51312b03e275eb2484880cb82e6e3f1a7781a359b89eeaceacbc3fed9e5e127f5b41dda935bec7151fd9","ssdeep":"","tlshash":"a1811292ff51798c157721639c531f5bb2b8d40353072af2dce7e1168ec911815a3ee9","first_seen":"2025-05-31T01:51:37.502235Z","last_seen":"2026-07-12T09:18:08.05111Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1071,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/banner/loader.gif","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/banner/loader.gif HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41744\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41744,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 290 x 219","md5":"e2ca3a95a3651ef7192f435bc488bd01","sha1":"1db1f676a450e7d168f06975b66bcd1bc308b4a2","sha256":"670ed926e4ae0b33f2c0b7dac8be6274b9732f6ee0236766ec31c20e4a9b50ed","sha512":"bef09cbc90681ce3f533260024d803bed0f8f36512383203ee4e43532b74733e99ddc3dd20d280334ca32f9596f118ebd1390105b80faf4b751f0499eab5ca71","ssdeep":"768:dVV3KCcZnF9IuTbDEofdzVyVUL32PrwzTYbQjQ6bEPYY+5+tqpYmdzWv:PV3KCcZnF91PDFfdzYE2PrwzGQjQ6bE7","tlshash":"4813e05ed45a8cbc3ba0446e30778b78d6fc9863a1e0f3a35fe1598b74905892da87c1","first_seen":"2025-05-31T01:51:37.478753Z","last_seen":"2026-07-12T09:18:08.051979Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1244,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/3.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/3.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1528\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 54, 8-bit colormap, non-interlaced","md5":"d9eea3b6b2e3472bba5b8a743f34c5c7","sha1":"2cb77c4180f41756f34cab5f709c8c728b4950d6","sha256":"b32dcee6933b681bf11d55a6ca4cbf53cf9329fd416911a40a6ce1a21b4fbfaa","sha512":"fc829c7e276b7fd225e040c52f14df01dcb6e08d157f1d6faf91b3d7cf431996f7e764fddf4a88eaa3d65f3109909e5cea8c4114f31fae14491b7fb55a1acf4f","ssdeep":"","tlshash":"2331c4588011bc808604bd79f63a0db5f9659eea22526018bf3ff2a0907700302cbb3e","first_seen":"2025-05-31T01:51:37.518544Z","last_seen":"2026-07-12T09:18:08.027321Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3143,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/echarts-liquidfill.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/echarts-liquidfill.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39524\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32017)","md5":"5d2ad7339533b387c00b112ef7d1d752","sha1":"531887bb37d21955c170820bbc184893fd7fb363","sha256":"0c22012c7dee36e1a23e3211f0d72336169e16f45523364f248a3c2324c87b64","sha512":"abefb99ef64d9813f1be9a2ac9e380a79b2b859cff8d27492799e3ea0007bf199923fffe0aebc1596bf2c47a1bf9bbffed470f4902470e6320fff2c459f214a3","ssdeep":"1536:321fcFRLWZ7CaRbHBJRCtv98rspkagnxL0lPRK:G1GYuaRbTRY+B5","tlshash":"28b3f8d87288b02943a35274446f214be13b7a09750ecd94f72ad5cabcbc58d52bbf39","first_seen":"2025-04-28T11:07:48.492318Z","last_seen":"2026-07-12T09:18:07.984824Z","times_seen":25,"resource_available":true,"data":null}},"time_used":5205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5155,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/9.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/9.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1618\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 48, 8-bit colormap, non-interlaced","md5":"b00b3e3e28023b0b8aaffe912c8a118a","sha1":"de167b07fc0123e2eac44b8453177933fbb496bb","sha256":"1d5b61988821757133fdbf6e1f94e4fe58d8c056dbfac83a4c98edff235261f8","sha512":"dc46f537dbbdda35420a78b2733f8c32acf6d1c3802d4a05877429681cafc5b7248785806f9aef21ab9269624144a591e2dc5ed095e14f9ab7d7351714467c0b","ssdeep":"","tlshash":"f031b5d325808f3b893514a262f74134e4834e6b23ad81271f323bf14ab719c444e12d","first_seen":"2025-05-31T01:51:37.412453Z","last_seen":"2026-07-12T09:18:08.049317Z","times_seen":23,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2215,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/bootstrap.min.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18277\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"cc0480f9ef7e44e21dfad7a983b4f103","sha1":"c2743b1c15dd653f049a4136d3d1f58b598502d9","sha256":"f0e71c474474ceedae050c344f527cdf8779f2981c88022d91c2755f31d72e89","sha512":"a00a9f2c25de2fad08e7d81ee2f4d2ced59a27bb36ddd59d6008bec1543719f6c5bd603274601b39dfd856b326b2b08ecb863b7ea09c39ae6d4e08d60a2f1e82","ssdeep":"768:VyDGxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Vw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"98c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f846ca1673f1a","first_seen":"2025-06-25T11:59:30.661996Z","last_seen":"2026-06-09T23:03:31.271947Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/three.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/three.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 202813\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1071493,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"663d1f0f512d724af8125396c52da24a","sha1":"5e722c57b18a8fce00eab54959101662a4d2692e","sha256":"a102a638b83d4b666396c6b180357a281d5bfeea2991e51e09a515525810e8c3","sha512":"095177874ee8fc32079da1cf3ad9c4bc51eae3c3578d480f15d83c011277d493f20f233f61ce97b26834002aea1d7d8dada93445e2ed487340045dfc67738f1d","ssdeep":"24576:F1Zdia9KJsour1OxpcgUqOUqIn0EvDJa+owRdQvCjKWJItd+:Tia9KJsour1OxpcgUqOUqIn0EvNa+5R7","tlshash":"4925b6c56bbd111eca237298956d10c9a53c9477a10584bfbc1ce5ea68e083c837ef7e","first_seen":"2026-03-06T19:47:58.733821Z","last_seen":"2026-03-06T19:47:58.733821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1066,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/3.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/3.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1862\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"cf41ab6cc5c86f526e721c1164ceea3b","sha1":"3763eac8f9e35fbc24e591a9f062ff8172878cda","sha256":"dcdbcec030cec4ab3d99ed4a1abee1d93251b81eda6ed7f0bdd4af829f38e6b5","sha512":"541edd97a8b0ddd0cc0ea1ff4de059ce5a753af5e6804d987ab1dcaca832b9868d0b33fa2fee86fa171b22e465b74dc3b126d1324f9c1f7727742bc327962bea","ssdeep":"","tlshash":"9831c5df121504f77d8305be6daa2c3edbd96da8848c236e618ccba80fd9bc6206100c","first_seen":"2025-05-31T01:51:37.470925Z","last_seen":"2026-07-12T09:18:08.044842Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/4.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/4.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1862\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"795212eff3adf6cb5d53fb6c45b4dfd7","sha1":"df3ce26bd3202d3a6bce345a83228fa32d4aec4b","sha256":"8886c555e61ee7ca55ddabddf78eb6d4669fd465bc6b6d35fb5280043b58a462","sha512":"fdaa17f44174e5fd45aff528fe639c30bdb8989db2bfafcf1d372c875daa01643378d5d46755c90415e36b3e47bb4b21de0e2259d9783441a3a1df9ce0e76a56","ssdeep":"","tlshash":"9531a51ed2150c36294f057e6da62d1edad96d5f84582329617ccba80a19b812f61c0d","first_seen":"2025-05-31T01:51:37.423069Z","last_seen":"2026-07-12T09:18:08.025906Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/about/1.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/about/1.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23255\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 397, 8-bit colormap, non-interlaced","md5":"bee7d8fbbeb07bf5bf1ea0b034a66f5b","sha1":"cb0bfee05416707d4fad620925c5f4dfb7f9a5d8","sha256":"1532da74c44db69c50f95cd04cfae3be0d438df60533bc3fd0793d71b4bb761f","sha512":"1f95cb62974c479afc6a0edefe9aee4319890a118c2d6003b43a70042ef6c70116e17f50444d31bc3c818abcdf1894a903c9005c0f931995d7bb78a0875409df","ssdeep":"384:Ok1hDeLWhvk7ifycvfpdfCpEVqPwE2BYclxVBreLj3N57a7QUhCJJr:Obq8nUGpEM4EGYQxV1efd5eM/r","tlshash":"67a2e17fec2f9dba818a28b3750db181b636a4a2f4367aa15914a01f6c065c0d0ccd5d","first_seen":"2025-05-31T01:51:37.364975Z","last_seen":"2026-07-12T09:18:07.996062Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/6.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/6.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13369\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"c9b7d635d890c40956282f9246d05138","sha1":"42d00e3e59f713f7d954d964b348459ce0300b01","sha256":"56496f2c3167ae0a7d9e6cd5b795d3371f8faacc18bdd7af41a20ba15510a37d","sha512":"30003704ee1b49d38ca1b530e6d9b148881aa77cf7db9ce641da6f8db105e90b883105fb54fcadfe2de032eed8fbf23e42b7159429456db9862004cbe82aaebe","ssdeep":"192:EUhu52D4RIdculDE7sUsry9IxgqOQLxwmcLyZ2czdKUlTco3XxEiyiBkJjv3Hsre:EUhC20RIdr12Lsr/aqDjjKU3HXYjfHD1","tlshash":"5552bf6c100f7d988d8827975e53793ea6f02ccfdf4f964ef8745a47955372408301aa","first_seen":"2024-08-19T19:56:19.369619Z","last_seen":"2026-07-12T09:18:08.029847Z","times_seen":23,"resource_available":false,"data":null}},"time_used":2289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2225,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/8.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/8.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1110\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 47, 8-bit colormap, non-interlaced","md5":"d824d293c5d9efc86f84946be0977bd7","sha1":"65fea76b1aa5ab0b006f08faba10fbdbcedc9be4","sha256":"3700e09cb5854ab7597078fcd965922997ad489353147a4d73c567e64e521e88","sha512":"0b2a74681723c4698c8a8530f9c7538ce57dc1ce038879a35587d87fae4f4bb9cf06fb9056502e3ed3450a6c652b5369017aa6676b96b4acde906e63aa8fcd85","ssdeep":"","tlshash":"a0119978e4b2f43cd9d3c14dd399610856778da020d84f71e050fca35571f1164138ce","first_seen":"2025-05-31T01:51:37.51444Z","last_seen":"2026-07-12T09:18:08.052909Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/owl.carousel.min.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1104\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5849,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5849), with no line terminators","md5":"044c5746afb4b9c4abefef2df0d57167","sha1":"767890b76efc192cceaa98a243fb61082fbe1b68","sha256":"c5b5520e7ce00b15fd4c0c39d13ba45bf1e4b1936d0b5da7ef0faab188fe80cf","sha512":"669c963fd6ec035bd96addfff394f8a33791a09b236c9d499b47d8e8570800f6520081ecb29f583703597e02a6ef662851d4a09e68fdba87705ffe8d74727d2a","ssdeep":"48:egpq7TuS6H5MGv+dDOmrdXYSjlriq5W0eWFds68l9mgdb5hdfO5IyO:vb5Zmr1YSjlrLW0eWvyl9t4IyO","tlshash":"62c102a94186138c90ab874077c8fac90a5c85e3683359ef71cdbd49c745ada22bf74f","first_seen":"2025-06-25T11:59:30.694082Z","last_seen":"2026-07-12T09:18:07.994879Z","times_seen":16,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/features/2.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/features/2.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27292\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 548 x 310, 8-bit/color RGBA, non-interlaced","md5":"837b29f941194be4acf9ab8fbbd41d1a","sha1":"febc2beea42d74e565cbd082727ed44b2fdd9055","sha256":"dadccfa089010bf9b14e67a360699a3bdd219aee96b8ecbe1d37f5865726f4e0","sha512":"8300d6709848d58c9f644748809e88113ef89f71ffb29758f700a8bd5cdef71099b44a09a189bed2ac30369792f7af62b18b206f434baa3808b87587225b3ebf","ssdeep":"384:zM9K0kBi7ALnY4pIrXVEmfQKcfptCYUpyfMYVgUDWkf+Q0RE1xgVsQiowa:zoMtLnYfXVEUwtU4MYSnk2xiICQHwa","tlshash":"69c2b0c3fc26b25d84219a968274533fd99841dcd2accd6fd317badfa5d8332a62c508","first_seen":"2025-05-31T01:51:37.425216Z","last_seen":"2026-07-12T09:18:08.026803Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2204,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/features/4.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/features/4.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16108\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 453 x 241, 8-bit/color RGBA, non-interlaced","md5":"242f160315e034c3354dbd216c8e3c68","sha1":"70e7db4eb3338dc0124b369a6e95d9f33504ee05","sha256":"9cf72a41f81df59cd922da409889afd6a48b0967e6eefee2e1730b33c6bd9d74","sha512":"fd36cbbcd0c17d294fcdba7dfd8c598150cc92b331f044b72bc7a006afa19e822a3dfeb812882f283a2ee8acadb35d3fb62f7715050839c5ea1c51ff5332512f","ssdeep":"384:H6rCOy9G6AwWxQGDI63VL8kmHjzz4tersBLDAlLON+9F:zHW2hgFMjzUteWLDAQ+9F","tlshash":"d372c0a4517f5141ca5c924b80598c8c21f497bf65d78489a58c32fad61eeaf04fc8bb","first_seen":"2025-05-31T01:51:37.444493Z","last_seen":"2026-07-12T09:18:08.011798Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2202,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/8.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/8.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6288\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 70, 8-bit/color RGBA, non-interlaced","md5":"0f9c669ee5d857500dff34af769028bd","sha1":"c07dd20c5c6456a439229620684200b794068407","sha256":"1c7ff7a99252f87357231a7c78d9e1d9e63d56a033ac9ba607857c910e9691f7","sha512":"9b423ff9e5ba6ed33c0927f84878c02ce244fb370c23c36320fe4d2d14f1d82616e89e150c7ad04f62c651a4e01c266fbe8e40901b2920acb0cc296cc464a71e","ssdeep":"96:z9dTj5OCCsilMRqbRjgYOP0SAbXLfHSASg7UkRauNHTxH6Fs8jBHr/bf:DQzvo0SUDBSg7b4q6Fs8Frjf","tlshash":"38d18ef2caafa0490497ff7c3c828600169216e7d2513bb5f1987fde560e3a125682c3","first_seen":"2025-05-31T01:51:37.410466Z","last_seen":"2026-07-12T09:18:08.045411Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3150,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/plugins.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/plugins.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1155\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1872)","md5":"9804c7bf8abf3f5d12e8c4c3aee800bb","sha1":"971c69aa6cfb6501146930d199ecd43d34f1d065","sha256":"ba7e001a1400281e75bad35572d8b4ce6631b1d0a978a3d98e232545a12941ad","sha512":"5c610ed4510b2f88ec8bdd22973cc26c88736edea594838ca88ad9365b6e930dcb39b41d5f182bee17d7046b64a00d75d9c07a3e6b84aa28dab9000fda4c7e01","ssdeep":"","tlshash":"325174496b95a52101df723cc46b1f09e060909bfe1ae0f9745cdeb80f61b7081af2fa","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-07-20T05:02:16.159759Z","times_seen":377,"resource_available":true,"data":null}},"time_used":5205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/images/icons/vid.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/images/icons/vid.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 509\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6567308f07f219d8062d0b2d15539cab","sha1":"bbf03b089eb003ef48c4c2c8dd2f497edc46f7a1","sha256":"e31d9d9b807b8976e69dc4b163936c59a3c569ff14b905faa11725197ac97661","sha512":"a7cc0b1ca5c57346231ef7086966a0e9920f1461068a0689814834930858f6763a5d8bb629c5f5946c6f5f4389e81c898d6e4a9253fa64a09ed97e762b45b3d5","ssdeep":"","tlshash":"9121513681121c4383629148b5446408eb8bcc5b8eef0550f5ae2785ffa2e53dca375c","first_seen":"2026-03-06T19:47:58.743174Z","last_seen":"2026-03-06T19:49:52.035501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/tether.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/tether.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7222\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25005), with no line terminators","md5":"4addc615e1906aad0cb15b5440d794a3","sha1":"d34f1f7de9a90bb18855ee82d17a979451ed5f83","sha256":"d5c88d31b9e65ff1a15b7c237c495c5c2a92a692c2ada646f3858354f6c9ac2c","sha512":"adf846344ca643f534ad04dc15ae4d3892cb406293d47e65bce6433c90a97e03f24a39ba84db5a3c2c29c3ab06c341e6524a9b14dac0a6f221734659d3f956ac","ssdeep":"768:1Jc67wdFbgSo6h+T7zMczQvoK/ww8l31g9CZQ5nAgM:zn74bFopz+AK/wM5Af","tlshash":"9fb2d6a8725170b681db5263907f930e7132c17463879054b63cc9f58db8d8e62abf7e","first_seen":"2025-06-25T11:59:30.667338Z","last_seen":"2026-07-12T09:18:08.061669Z","times_seen":24,"resource_available":true,"data":null}},"time_used":4209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4163,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vendor/modernizr-2.8.3.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/vendor/modernizr-2.8.3.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6012\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14866)","md5":"baa31b73aedd668e9ab4b706b79b9cb2","sha1":"f543cb4bffc7525eb65fd7bb0d9fb6faad5bdf5c","sha256":"d5448f267dc6b4a999e770b3438b3cedff09bd09f606028a8e031c46eb90caff","sha512":"6a8db463c38a9ba3b89e1eda35f540a43622189cec098b165e72ea5a279c49dfde8be57f9651a9235efb26218995b212f4dc1558c44d1ba65e1adaf7205ffcf8","ssdeep":"384:AEDDCHW519TpJGd+xedmAnx6KQoZRY5y60Hh5pD:ACDtjecAgKr25y60H5","tlshash":"2562facdb153b1168397607a61bf460ff23e9899a8184854e059c5ecbe74ca8473bf1e","first_seen":"2025-01-06T16:40:49.922215Z","last_seen":"2026-07-17T15:18:04.165979Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1070,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/11.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/11.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7705\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 85, 8-bit/color RGBA, non-interlaced","md5":"7c1042a2409267ab7dae69ca8e5ebff8","sha1":"014c71fca7c3263bd896ca412cad75f98d8f0163","sha256":"df29751b8e3e11d1f60bcb915c9b560314e86d70fb78e5497ab4a99202fdf8ff","sha512":"c6ac85cc438aca76e81a7fd1eb29809242c99cc29558a5dfc75d5c0e3811815764db770aea43725716fd6a9e39fd77c2b32a2149010a4200e1f5764119e6e3b9","ssdeep":"192:yxC+HcAuB89JAQOcjZHNnea9giHe+XgWzums:yoIcjwCQ1H1ea97e+Qms","tlshash":"38f19efa26991f7ec77912d428ca4c906136735c603fe715903a2c203bc5ab26e4ec1b","first_seen":"2025-05-31T01:51:37.504605Z","last_seen":"2026-07-12T09:18:08.03046Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3109,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:27.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 02:17:46 GMT\r\nexpires: Fri, 05 Mar 2027 02:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 149381\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-23T23:43:50.017636Z","times_seen":181993,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Fri, 06 Mar 2026 19:49:23 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJCgH3BgAAAAwBuUwKCQH3AgAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420e416e818542fab69318cb417\r\nx-77-cache: HIT\r\nx-77-age: 6\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":49,"dns":21,"connect":8,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-c5ThC_K-.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:33.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-c5ThC_K-.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69a543fc-453a9\"\r\nexpires: Tue, 02 Mar 2027 08:04:17 GMT\r\nlast-modified: Mon, 02 Mar 2026 08:02:04 GMT\r\nx-77-nzt: EwwBuUwJCgH3veoFAAwBuUwKCQH3FwAAAAwBw7WvBgG3AAAAAA\r\nx-77-nzt-ray: e2f75420b411733b552fab692d735812\r\nx-77-cache: HIT\r\nx-77-age: 387773\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"fcd469aa001be1dfd30d0962c705391c","sha1":"87b8c021a1232a7ba7cd2d482113782215313b9f","sha256":"df06e0821c7c9aaa47dc040afcefc59ff8743c8beec02bed3ce656cfa9163020","sha512":"1c344e4bea46a7c81544ced75a2c75c38aa64ad7ddf395c1a0beb293373d339fbb4aea0b0b13864028be791060a40eb12d557d01c7e13169264712b416f91304","ssdeep":"6144:AsJU8SN+jtxjR/ZgQub5/rLmPh+WVcq9kNp:AwU8SN1b5/rL+HV3up","tlshash":"5e544ad47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-02T08:25:26.037318Z","last_seen":"2026-03-10T05:00:21.849653Z","times_seen":431,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/stats.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/stats.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 858\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (507)","md5":"a18d9a11cbd79f312087c3bcc39ee310","sha1":"0a40100a2b292a486882bcd64d90cfdd7c50454a","sha256":"b1c6652e0d103519c9201caaac1d19064b28e664e655be5f5c6c0164c1995600","sha512":"b1d1b8038526820ae142daa2584e17be5529964554f57e7ae87dfd77b4b7760c10d94285002ca83ff183b5eea523666171399888c34d32b1fc1951adf0239dc6","ssdeep":"","tlshash":"12312448a6b0b6d29ab1349a78de98c3b4611975682bcd0a40fdc055eca5d49058eb8f","first_seen":"2023-03-10T14:48:17Z","last_seen":"2026-07-12T09:18:08.005988Z","times_seen":83,"resource_available":true,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/7.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/7.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1407\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 47, 8-bit colormap, non-interlaced","md5":"50a1479dd71df2d50ed3de44bdcc4cfd","sha1":"1bee1d63dbdf30dc4f463466288eb541fc2d82e3","sha256":"773ec5413104c31d948141fee0ee4016b9ab7b3805087a5a82f2e8897cb3773d","sha512":"93da3e219b68be450b60a5d05b170add30f8c1f2c6135796628d1e03637861174aa20acd90e23e6c9432632520a0d3b4833801ad40020be4bfe0806b98607c5c","ssdeep":"","tlshash":"5e21679303407c9d8d5d75a79494e71197d3bf092dd54261720a78539ffa2211b60495","first_seen":"2025-05-31T01:51:37.472932Z","last_seen":"2026-07-12T09:18:08.004306Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2216,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/8.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/8.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16073\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 40, 8-bit/color RGBA, non-interlaced","md5":"deedfdd06586e009ab45347ccbadb2ef","sha1":"1a0b25d5fb9659a2a2d014eba0569f83ff1bd53f","sha256":"8d3894ca92df42d0c50e8c268947819c8d22b237c935a263918b20d5b3ac1764","sha512":"9913c3d646afa8d89dcd936a8c569ec2f8b5eb37debcab03ac8e3b012f61a9e8904cef33b4fdaa00cdb3c8010d56a8a7f787c37bfffb12480125ec360a95eb12","ssdeep":"96:LSmkEWRdxNXZsc5tH3HGsd6E6DAPdfx+4YXWrggU:LSmktHZBd6nkV58gU","tlshash":"4b72e711fdf072a2928dd5312cc42a4a9c334983ec91cc06badd9c5b7f01baa5e5f5d6","first_seen":"2025-05-31T01:51:37.48838Z","last_seen":"2026-07-12T09:18:08.000165Z","times_seen":22,"resource_available":false,"data":null}},"time_used":4213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4211,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery.meanmenu.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/jquery.meanmenu.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1304\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4027), with no line terminators","md5":"17e1ef9e05e97b31d5a556ef896a5e4a","sha1":"0ed4f5e751b41717d032e6de923298bea258c362","sha256":"b65c7d6040a61fcac73e3d80fa612af9cb600262fe5dbdf1afcb2d9730692a7a","sha512":"150fbc53180786725abe38255daa02b45bbaf017f5f4fc3c8e64304253b88e4f9c1b937111cf1d642fc4901570e19a9cbebce5d7e475314bd010b2ff5f816266","ssdeep":"","tlshash":"9d810062b57084fc24bf64e6f43ee33636f7a40af44ed400b07aa9b63425e941063add","first_seen":"2023-05-10T02:54:21Z","last_seen":"2026-07-19T16:31:48.188647Z","times_seen":72,"resource_available":true,"data":null}},"time_used":4203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/vc_round_chart.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/vc_round_chart.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 674\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1657), with no line terminators","md5":"2ae3362ee0683081b617e0af326a7d4a","sha1":"a1145fdb7f0b69079ddb88d958073df13b595c71","sha256":"66084728357a56cef8f76c30e1b67639826c35f0a431567767e8b817e21be765","sha512":"c2bdae710ba490352168d556e5a30b1b02c29b81eb779c9a48f0e837a21fdfc2f11301ba1deab4acca252bae646b55423590c4c2e6a48c427c6fd99dd67dc1d3","ssdeep":"","tlshash":"ff31ebe5f1202caab2a722ab462f7399d323b17d0e523109715094fc492a81f353aa3d","first_seen":"2024-11-15T12:33:52.384084Z","last_seen":"2026-07-12T09:18:08.024345Z","times_seen":31,"resource_available":true,"data":null}},"time_used":5203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/video.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/video.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 154865\r\ndate: Fri, 06 Mar 2026 19:47:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (489)","md5":"647d4c22d6fbe8941186b2001bf49d53","sha1":"e15a33a5b099648fbc1208215a3c1104666ee705","sha256":"f6f9685a8224763d2a745399f4b521661e46fd262030124833ce0485680eb007","sha512":"defec4676ce99f05c00422b240d129aa3e3ac7d0ae98d6c6853a8541c861d3be1f1e2e288250a3b4bb5522380a5911b71693ecdddcf1a2aa18681429a7dc1dc3","ssdeep":"12288:v5hjAxEMjK+CJuwnnp5iXIlP3f3CkabJ7bQKe7n5cDFMnhfF+E323HkLIc0p7kaQ:jjAxEMjK9tywabJ7bQKxjkLIc05k1Jbn","tlshash":"4de4d84975f923b1446360b8178f61c8f238812f511ad988bc9ee7e81fd5a3447faee4","first_seen":"2025-06-25T11:59:30.699376Z","last_seen":"2026-07-12T09:18:07.989774Z","times_seen":16,"resource_available":true,"data":null}},"time_used":5245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5159,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:33.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69a543fc-7b0\"\r\nexpires: Mon, 02 Mar 2026 08:09:17 GMT\r\nlast-modified: Mon, 02 Mar 2026 08:02:04 GMT\r\nx-77-nzt: EwwBuUwJCgH3EQAAAAwBuUwKCQH3AQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: e2f75420b411733b552fab69450b9910\r\nx-77-cache: HIT\r\nx-77-age: 17\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ee61d71d429e47c8cfbc01f8ffcea9","sha1":"42d5fd8d5dee0f75e30f24d7b996ce60aaf32121","sha256":"e705b4ee1f5ffe1bcaf198567bc2d83d370fc56a50c6181c86ed04ef68f6c1f1","sha512":"d6a25a596f05e6ef34374672b7f12995e03a0be9bc9e7dd0dcecf3bf50deb5e1c968aa2bbe36d8e597263995f70b51005f4c4a8d60cbfa90f8efe3444d91ae35","ssdeep":"","tlshash":"ea412493c4f80d531b9c662bb89449814d90c3c7e88a3d1d366d8a7f2f4ceb911e6b6d","first_seen":"2026-03-02T08:25:26.032575Z","last_seen":"2026-03-10T05:00:21.827354Z","times_seen":430,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":61,"dns":35,"connect":8,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:33.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c71f1ce9b1d8f235b087d509a18d375fa98ff99e\r\nx-77-nzt: EwwBuUwJCgH3RQEAAAwBuUwKEwH3AQAAAAwBw7WvFwG2WQIAAA\r\nx-77-nzt-ray: e2f754205c128142552fab692520291b\r\nx-77-cache: HIT\r\nx-77-age: 325\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e15688e9d2d002a9ed39b75b69eaf60","sha1":"8334c28b880997b2a4391aafde10a4b7463dfabc","sha256":"b094c3b5945028f864269d3d5af31e88f984e7ee5119a61ac716801e948caab7","sha512":"87c5e8e52504edf16fd6f7669e17287c6d8eace783fcbd020158b273c01dd38e75088c20f4b204c12906d7944507b6a120403cf63ab2307361cf844b821f8c92","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/YmzW:CgF/hcbWbYKZcF+jhqoWQmK","tlshash":"fce1b64f9a144ea987c6438276cfb84675bc807352509d7afd8cc8b842697cda3e3b94","first_seen":"2026-03-04T14:01:17.972897Z","last_seen":"2026-04-01T05:39:45.260246Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":50,"dns":22,"connect":9,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/css/meanmenu.min.css","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /css/meanmenu.min.css HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 30 Jun 2024 21:09:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 711\r\ndate: Fri, 06 Mar 2026 19:47:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2613,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2408)","md5":"258dc9a657edfcfc99de35a8a2fbda98","sha1":"a92ea5d8fea718cd59a5f00ae9cc198a4b1e2060","sha256":"5fbd6c86593dc305bf8d2e188bfba4f236f3f02f3006e88d9e1466bcf3b6d691","sha512":"4350e84b9ddee483267d110933374dbe580b50098fe066fbf8e8623524fcec7c1b441d8cf074988fa0d1faa2246bad70bc305d1ef973e2c66e071511a26bacb2","ssdeep":"","tlshash":"2151dc62d6762028bffe8178e802d36d79f4a01fef0bc9a8aa7ce125c8853c971555c4","first_seen":"2023-04-14T10:55:10Z","last_seen":"2026-07-23T09:04:51.39413Z","times_seen":199,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/video/2.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/video/2.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1023\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 50, 8-bit colormap, non-interlaced","md5":"28cb98a3122ea224fd0219a73c05f69b","sha1":"7b2bee4f58f33d2d2644ea8c39c0b173d338edfa","sha256":"a30c329b67906b33e968ba606501139123b41b86a0332aa78c3a8a81d1b53741","sha512":"f9e192ddc840fa859b46a7c13ef2362c2b755ac1d576357c6b5305e5e170beb87600527775ea27e8d3a779245f4e368eb46b49889edb9d5c73a0fff64ddba748","ssdeep":"","tlshash":"c51144ae82d067f5e690123a560f9061cd216c9f60c04b04f20ef9a6b7712088267bcb","first_seen":"2025-05-31T01:51:37.455559Z","last_seen":"2026-07-12T09:18:08.003765Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/fonts/fontawesome-webfont3e6e3e6e3e6e-2.html?v=4.7.0","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:27.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /fonts/fontawesome-webfont3e6e3e6e3e6e-2.html?v=4.7.0 HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/css/font-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 30 Jun 2024 21:10:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Fri, 06 Mar 2026 19:47:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 11534.4","md5":"8be1c8f32747c80cb7774b29ec81beef","sha1":"0240c2c024ff55c02a213159bc8937007babed30","sha256":"26611d99cced0a9dfbbc4f47818921a0ebe247d9d4eb2eccac697da36f89a0eb","sha512":"2bdfcbe54dd175b1cefec1d84b1839d7813b9a341fa3c7bbf1b311d98e2cff830f9d13e9e5302753e9eed2380b6d820857d658536c8555f5de01b63c4a351c2b","ssdeep":"3072:PWGmiOeFF7zjktPaEV2k07DURADtJXhlZePWJeyEKAuDSt:PWGmiOCQPK7DUevhHePye/4c","tlshash":"3db3f1068385f3e0d2fb89f994961ae4a3064b95dbc37990c724c3712dca21873efc96","first_seen":"2023-04-09T23:40:01Z","last_seen":"2026-07-23T06:19:01.185031Z","times_seen":2913,"resource_available":false,"data":null}},"time_used":5001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4999,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/d8538ca8f877bf5d3c074657a1dc1ca3b763b88f.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:32.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/d8538ca8f877bf5d3c074657a1dc1ca3b763b88f.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://www.fidelityinvestmentprime.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 19:47:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":90,"dns":27,"connect":21,"send":0,"wait":26,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/CanvasRenderer.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/CanvasRenderer.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5397\r\ndate: Fri, 06 Mar 2026 19:47:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25811,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b420ec629bc1534ea32fa984d505dc40","sha1":"56db2efd90f4d657472c66bd15ec3dfeec22654c","sha256":"7f27d86f904da002876b8ef8b02e3ae6af10ccf99b17946b2b15126588bbc6cb","sha512":"e2dfa2562b017e8e30f9791265c601b28953f9ba3a2bd2552d90c9c7d2696addf761ed4855e4390e66c5ee622eed78b07f307de76273562cc8def2dc6f050ff9","ssdeep":"768:+bcxdPXXlu3+tipnjjFq03WuDCpXCe/gORCg:+bcxdPd0pnjjFq03BOR1","tlshash":"4ec254a8a77d724f162e711d511ac088a77ce06b8601d5ffac0c426819e362893fef7d","first_seen":"2025-05-31T01:51:37.432781Z","last_seen":"2026-07-12T09:18:08.031981Z","times_seen":23,"resource_available":true,"data":null}},"time_used":1228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/7.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/7.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2440\r\ndate: Fri, 06 Mar 2026 19:47:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 81, 8-bit/color RGBA, non-interlaced","md5":"f25c040925a70fab77844b9fc231cdfd","sha1":"a698efbc566051d45034915f414d3e63540daf74","sha256":"53170f2bba09aa8950ec7d15544a0ad33b1fc0c3fe5eb4ad6c06cc9c60085f2b","sha512":"e5b6386ada6736c0218818b3500b59203f09690c1ae9bf7362a545956e902d46dd0a60733cdb2df5cf071b20bf96efb49a8719ec3b55fea723c45c804201e072","ssdeep":"","tlshash":"4b513bf9035a58d8b7a349505444a343d80dafb639ebd7a533bda26ba84732e4dc03e1","first_seen":"2025-05-31T01:51:37.408917Z","last_seen":"2026-07-12T09:18:08.016846Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3151,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/icons/l.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/icons/l.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23936\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced","md5":"c49164d4bcece7a420021a37d326a961","sha1":"e34d0105cf0423b1c56523b21a1f29c154a94b75","sha256":"7579bf9c7889f0639a312f502181b6405d968fad7bcd21e57b5ec0e212d75d73","sha512":"b148bd9d4b172ee0005200616d2c5a7a9dcaf610178a67aad3194103b5b764ba7116c94db8f926f0112b1fd83095c5befd3a916ae31ba556fac1323b7d378724","ssdeep":"192:sSKk6DoAl9t+8y7dBhqFpUmmYQPjXb95XtC8F2BqwUg9GDV2826bHlHUhJZ5+:rZ6fY8y6I3Lb9512YOlql85+","tlshash":"5db28d64ee70f08590c9e1b625e22d0eb8574e03d7021cc9f9ad6d49bf18bc15f8b9a7","first_seen":"2025-05-31T01:51:37.49648Z","last_seen":"2026-07-12T09:18:08.017692Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2215,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/images/media/3.png","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /images/media/3.png HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jun 2024 21:09:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17107\r\ndate: Fri, 06 Mar 2026 19:47:28 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 40, 8-bit/color RGBA, non-interlaced","md5":"027e0e7d4e4391e2d088b7f85cd282a0","sha1":"85c77c90053648543a42198a92ee6450c9fa0269","sha256":"7e763040b8e0d6e66db1fc75c1fcfd3df8aa7c7b43b793ef991a064ec0c2e4c6","sha512":"eecb7c65dc568a8e338e25e429d1ba877526e45ee4f65f666709a1213248213636ee0fef8429d2d1a1878b456668a441ef95ad09ec4b1aa5492eb69e08d2e1ae","ssdeep":"96:eSmkEWRRxNXMexL7sc5hFHxCV1SuKYHtSuweehRdW3ef7:eSmktDSexLPHkfSuKaEtLg3ef7","tlshash":"ed722b663df2b8e2a197b0330dd1591a8d330e47e5c16c55b68c6d6bbf007a51c1f8da","first_seen":"2025-05-31T01:51:37.414494Z","last_seen":"2026-07-12T09:18:08.018588Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2213,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/bootstrap.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10666\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50397,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (550)","md5":"f7b290eb457738f20d2341ebb764789f","sha1":"608c30854d7ee9e1b3acc27e32d7267b53537a38","sha256":"4635187907fff87cff8287d3bf6b46f641542170e7921ce3c6ccb36264b0df19","sha512":"439289555cdb2946af85b3927d81c5215c1a99b6718a4fe1ac34083710de86523418020ce8a643a2f973b321674ef00425cf8b2b84f70d6b9ec80ff46063dda8","ssdeep":"768:6g2oEy7P5alWbrMAD/r5oyAoxUJxmoz5zOtpjnqZY0WUPnkoISarEj/l5Jl46Zl7:Z3EUBtbrd54ftzcnv/MXJl4+l1v2u","tlshash":"db33840bb7f22062576bb0a58e5f45087235492fa64bdc4c3c6c92e06f6583855bbfbc","first_seen":"2025-06-25T11:59:30.65386Z","last_seen":"2026-07-12T09:18:08.056984Z","times_seen":16,"resource_available":true,"data":null}},"time_used":4207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4161,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.fidelityinvestmentprime.org/js/jquery-ui.min.js","fqdn":"www.fidelityinvestmentprime.org","domain":"fidelityinvestmentprime.org","tld":"org"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.fidelityinvestmentprime.org/","date":"2026-03-06T19:47:26.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fidelityinvestmentprime.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 12:02:28 GMT","end":"Sat, 18 Apr 2026 12:02:27 GMT"},"fingerprint":{"sha1":"8B:1C:C5:22:B7:EC:CC:47:A3:BD:D2:FC:54:15:2C:5E:09:1A:26:5B","sha256":"63:B0:66:1A:4A:5E:56:8D:80:CF:F1:31:18:83:1C:63:08:EF:2C:0B:3E:E8:C5:79:DB:B4:B8:0B:C7:5F:79:FB"}}},"request":{"raw":"GET /js/jquery-ui.min.js HTTP/1.1\r\nHost: www.fidelityinvestmentprime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.fidelityinvestmentprime.org/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImwxZkFPL1VLQXRmUlVHUE1Dam9GVEE9PSIsInZhbHVlIjoiaU52cVhIbWM3RDRuWUw5UnFPdXlkNU1BeXRYSlFsRGxBQnNzNXlzSEhCTmFBRjN1UUdEMlZFd3MvNTVMM0QzaEZBbEJtSFlFd3dCNGx4Z0pOOFJ0NHUxbDMyVjIrM1dXNm0wM01tbDE2dUlEM1hpOHRnb0VEMm5tUTROaklNTCsiLCJtYWMiOiJkZGMyMzRhZDNmYzk5MWQ3MTNiNmVkMTY5N2U0OTE3NDM3ODJiNzZkYmRmNWRmNjBkYzVlM2EzNjQ5NTFkZWMxIiwidGFnIjoiIn0%3D; hyiplab_session=eyJpdiI6Imc2cGVQV0NpMUt3TXZSUEFMUFZoOUE9PSIsInZhbHVlIjoiTmp6dTlyL1FhRnl5V0xENEo2VDdvYzZ4VjAwTE55SThrUmVacnVROU01SmhXR2k5dldBeG1lcmcxM1ZmSno0K3FZWkpQOSs5MlA3bExQUmkzZkUrT01vOExEb2x4VnlqOVJQRi83ckhqZGgxcjhlbE1GTUdWZm1XdFNmdGFvUFIiLCJtYWMiOiIyNzZiMjdlNDk4NzgzODg2ZDJmMTEwZWNjZDkzZGNjOGM0NzNjYWQ3NzE4OGU3NjA1NWIzYWRkNmJmNDU0ODQ1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 19:47:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 30 Jun 2024 21:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 65651\r\ndate: Fri, 06 Mar 2026 19:47:30 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":253668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33326)","md5":"471a3bfaa847c808869a4d1b5d17da1a","sha1":"95d2695be48b0b2a1864155c165dad4b8d629bc3","sha256":"26e676621b0cb95c7299fac3465ee400c1fb5855fd62d112a19fb2c16b07f2dc","sha512":"15e09720f349a9da035a658f5fcdbfc2384665e027ead5b86e01f16e12c8d12f027659edc1d706e311d9c08f58eea284d78aaad23ecc66101e5c5b4c4de02e01","ssdeep":"3072:7kqBNnLOBjG0qwOO8D5BnAcKcv15i+VXMS68ay91XaSD5sV1jK:ZLOBClgc/KDS68p","tlshash":"a044f84d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-10T03:06:37Z","last_seen":"2026-07-12T09:18:08.039296Z","times_seen":30,"resource_available":true,"data":null}},"time_used":4199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4156,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.fidelityinvestmentprime.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}