{"report_id":"94aacc5f-e082-45f8-89e4-3b1c20544b21","version":6,"status":"done","tags":[],"date":"2026-05-16T13:14:55Z","url":{"schema":"https","addr":"investintsla.site","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"final":{"url":{"schema":"https","addr":"investintsla.site/","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"title":"National Private Banking Service - Login","dom":{"size":35453,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26743)","md5":"32c089fec22e3dfc2e795d69538820d8","sha1":"023fb713ebcdc3cb6ff9687aa8e69bd29cfa705d","sha256":"f13bf8767565161fce08f801061044e3a5dc40a018864e896ef76fec06372a7d","sha512":"4f791ecd8cf6ab4a36277fd452ffe1007ddb0bc98635092eb90f88b9bc2ac44994a73d072e3a6fdc549faa71c229e68348aad34fec4404e07889b7124d3d9251","ssdeep":"768:4eTagNPIPw6g1Zv8KZe2TheUB+Ye/IPpIuyEY:tTaC6gD8VUB+Ye/WvyEY","tlshash":"0ff286534c81254bf52b8e699ad8f90c16e8d207fd330d5db66cd0148f97fce14aa35a","dom_hash":"domhashc25ce9ac4433b3ed3acfe0ba28e080a7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"investintsla.site","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T13:14:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"investintsla.site","ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-05-16T13:14:56.006992Z","last_seen":"2026-05-16T13:14:56.006992Z","alert_count":0,"request_count":33,"received_data":770513,"sent_data":16663,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":4,"received_data":116312,"sent_data":2164,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":5690,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"investintsla.site/assets/js/libs/jquery-3.1.1.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-04T16:40:36.23384Z","times_seen":143337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/custom-sweetalert.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8210ccfa29b9380912ac8bc4f05fbf2","sha1":"ff1f62152801528b47ecb10ded333a7042967362","sha256":"90726872bcd80da5a3230ce4001b05bc34b44edf153d875622cf4e3e2fddccf0","sha512":"effcd1261f519241b070ccaf3f915f653af2a80030012d4236683811dc9b6b8107c2f3b63b26ed48545317aa949c52b67a277f169088b9b69f6d995a41eba2ac","ssdeep":"96:ZJakHZJ+/28lM0RGiBI2krV26D7h8JwTaO3n5kntL:Li/5MBLPrl9Ta1","tlshash":"dbc1c1fa95b80135892bb4a0989f381967071047ce45bd787ced43b02f9c67da0fbe69","size":5898,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.017631Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/bootstrap/js/popper.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","size":18994,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-04T15:32:32.280501Z","times_seen":6318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/notification/snackbar/snackbar.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"76647ab6c41968724a9bbf4251c08361","sha1":"6d81ad2fbaff0acd11140c906b339696fce4abb3","sha256":"faece9f8b739341a9082602ef320e3daf77ffd32747f5a54ab980fc4fa055f45","sha512":"0a1492cad08ad80d08988027462868a4ca81bc5d6d8db6b3ad2edb7780d2f03731b05221e80ae8388efe25bb02858b01d791daf4fc1d96c5c3c2fc3de5c5e01c","ssdeep":"","tlshash":"7d513290b615ac30c25311eae0bec15db2fe29acf5481cac80a9e4fc5e7dc4c7417936","size":3120,"data":"","first_seen":"2023-03-14T06:48:06Z","last_seen":"2026-05-30T23:38:31.007587Z","times_seen":732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"de9ae3299a221dd7f814a0a7f3b28542","sha1":"5fe01a2f88be1dfc05bc5b9eba12ba7a5f675fa5","sha256":"adad71e40b7017d7a4cff0154fb837d3d27972976c3363db2f1d30daf3991373","sha512":"48ceb93d5c02e62fbfc9f816200f0d9fc27a8050d19c5cc4fe0f296dc78c9c396952ad3551939b03304b31b95c137396601ebfed657ba161433b19dba2b968c3","ssdeep":"","tlshash":"e121384eb8e268419173727f8efb5600ba36245b2a0c8a00f81c58d0aff4259a9a5e4c","size":1303,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.042491Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/custom.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92a9fbd40e1564da082d7b09cb6a2aa","sha1":"9189f8b28ce98b0a88f9d5cbaaa5c4b0ca39d77b","sha256":"a6e7c8756667f3f480f1eff498654d182c65f0576c3828af374c4d74ffb55bd1","sha512":"a6f728a94dfb51ca89b42499c5badc4e0ec743d82bccb885ea0f29f6936007c183706bff691ef7912b11d8e7a5b52f00394bc9ab7597b68c843f879605d41959","ssdeep":"","tlshash":"7271eb9de8b351321677235200513c48ff72141f9b065525b8ad06d62f7875c83bbfad","size":3751,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.015945Z","times_seen":698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/sweetalert2.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0fbbb6a962394ae43fa921d9faa998d","sha1":"d77926e1aaf9a37ace3f1a3beafbddc5002bcff0","sha256":"e3414f979119f198d602006e67fce8956948983d6899c8d9cc17eebffc32c479","sha512":"4ff0ed797ae5e7895ee3093ab640d96de1c607940756c0b059d3e067c4f89acd34c834ed07beaa2c1aa36ac7d3283a7232de4deea73825a5510bc9b7482c58fc","ssdeep":"768:dnSVclYKaoe+QPLriy8/4tmk0t/LuvRuj2uYT3mNbZL2kp2Orb2hVWBZv8KZe2TJ:Ns3+iriysvCcjdEW2Q+2v80","tlshash":"b7433a92698031279a3b8a7515ded50c76b89116fc330c98b118d0a44fffe8f15a7baf","size":60637,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.0167Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/highlight/highlight.pack.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"667ce8066c12c1af9014e740143c39ec","sha1":"dc0c9e944c29e836b2ec56648fbffbe03891592f","sha256":"193aa4e8c74782571fe80c33c69f93978a955c3fb7644f2135c747d98e575696","sha512":"453586e63eeddcf4996c77edcacfe77ee4fd1624c464847ce4ca867bd677178e3b2d123e27897aad0cfa924bd7a624c14095716598c1bd1f8c1b873477a435fc","ssdeep":"384:mjhGmg3ZCLQKkLJm7f5tCLwyor0MHMQMTob5NCp3FET329w8N:X3ZCVkE1tIw1r0MHMQMTMaET32i8N","tlshash":"9a723ccdba177a270a5200f2b08f6506743e7cd7304c9464e756dab86dbec6892b5e3c","size":17197,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:30.998205Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/scrollspyNav.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8288e59fe940b27dcc79c35ee65ffb94","sha1":"f2d103f3cdc2d9938afc6ff297b3e8a8f22630a8","sha256":"ab2d81d45430bda61ce61ed5556dfd0b83b613d592288f91d93fbb0c24b20d60","sha512":"ae570f9e45f29b5d2d9235cd4063e17b646b330da0adaea328b254c00e84e76d7827dcaa6cfe484ecfe46897233faa43eb42634ccc9a68dee964e7be2721ede3","ssdeep":"","tlshash":"6f01d391a71960912df8676b4b1d754cf350419f960b9d58389f0fa81f3112412f6de6","size":677,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.010741Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/promise-polyfill.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b573a7b47496b092478720a088dcbc5","sha1":"2ef8b544741b8fa2266bd6a06c45d74607370b21","sha256":"0e24697d795236d0b673f19da3d12a174f65039d90490c089ebd8f56f2127afc","sha512":"5137c8b811917b0e8f495faf08156644e8b172b2304c12ae942290b3a469beb6d6648e2636b696f4783832f7f8ac08d5535d85681deccf577601357a3694201c","ssdeep":"","tlshash":"4e513e4dbb74b06965bb7170812f600ff2b6583638ac04a0e611e4f83db691d8b5bf4e","size":3133,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:30.981338Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/authentication/form-2.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b1c7355c5d7ffd950ba51bc1dbac889","sha1":"7ec25f8ed54b9536c51770bfc3ae75c7b3511b8d","sha256":"58ff07b8e8840772419cd6ce798c3b7e1e4e8d39efddab72f82407bfcd51e565","sha512":"422b0c69ab4d93035581ac848bf83375bb9ac7532fb2dbbb7bc96964ddfaf9bcf1b5c1839927d190f8d03858bb9c72a486e77e65badfc7b6260d2716eab2d95e","ssdeep":"","tlshash":"0cf022bb26910c32f36aba33a07e7319f97480150a06f642393cca5c22b5ec26975bc5","size":600,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.032982Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/app.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ad35296c4d333800ca20e5f8d7c7cc","sha1":"0d2aa22c151cc48f26aef1af609a23ebaf693cb2","sha256":"dfa8eec1b9bca04c2568b54524800ce1d16b8dc4f8d70fc5d5e998a161640b34","sha512":"d2b0193acb36050a04a32686be19c4bc31894e2d69df414beea51da9631480c01eced04209f19239a391caa9b7305d9d3c2b5a4727224ebd5bdee71fb13e855f","ssdeep":"192:oFaemsrJGp0MnD/haM40tVQKv9JSRqWNbPsTvsm:oFaeLrJ0gOtiKvXosLd","tlshash":"788241587420116190ff737f5bfb2168fa3a0a6bc1014611787c8ee92fb1592b2a5fdd","size":18388,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.009731Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/components/notification/custom-snackbar.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f3d504e84db5b77a1dfdbe2ef84b334","sha1":"3f9087ee9fd0512058165aa215798a3cd18177d1","sha256":"1c1c2ec41829211636686ac910a1f090d201a4508f15b05425af99196169b808","sha512":"2b9d38a6efb1b83050d13e03b16417bf60822ce5a0a855dc4ea3e9f1d0c72c728818e31f0632ea8fb96eafd9348c714e685b7cbb321ccf879c6e58709910b713","ssdeep":"","tlshash":"d8618bcff049729a06336fb9c4a6e808c2762ecb6545961e3d3c43165f780d83ad2f64","size":3256,"data":"","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.033802Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/perfect-scrollbar/perfect-scrollbar.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a10bcfa0a9c9fa9d503b5a498cac31e","sha1":"c4f6c403e99fb37cb496c3844b332823db7c5837","sha256":"a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634","sha512":"3554bd9ee0ff3dee5b9c2badeb76402408f92f2f88e55d4bc3218602d2a0d019175215aef025bde97c3964d431bed0b36401f6762f78ed4279c73cf169201695","ssdeep":"384:KycVuy6etbUgQMEi4tKmvwtp/L4VDgveAuH/jDZ1OWoxKjTUpBlMn1deF+Rd6gjj:bcVLIgQMEi4LoUVDgIOWybI7joi","tlshash":"f8822b98321134b851ff68add48f470e73366013b74f04e8a554dff86aa87b56262f2e","size":18291,"data":"","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-06-04T13:14:35.031222Z","times_seen":4139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"659f3e68987a99115a62f059d921be2b","sha1":"3924004ebb605a3ccb080c9c97507f8beb922eed","sha256":"3338edbae92c1e2651ad43d31ead40d3a0f4f671fbc7b90329b6db0d3f6471cf","sha512":"f10927cfa750a7242b2703f42ee832c854df109e3f90392ea556a5580515d87ab57359626a4cc6f0869aec77bcf2a01443150d8351c0229f0c27db358ca0fba6","ssdeep":"","tlshash":"e8c0925eb4f7a0e4007bb23d1b3fcc85763aa8cb740cca007d4c4e952f3012c91a1a89","size":154,"data":"","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.057056Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/bootstrap/js/bootstrap.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63467,"data":"","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-06-04T12:57:56.896557Z","times_seen":10284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"investintsla.site/plugins/notification/snackbar/snackbar.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/notification/snackbar/snackbar.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1152\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3120,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (989)","md5":"76647ab6c41968724a9bbf4251c08361","sha1":"6d81ad2fbaff0acd11140c906b339696fce4abb3","sha256":"faece9f8b739341a9082602ef320e3daf77ffd32747f5a54ab980fc4fa055f45","sha512":"0a1492cad08ad80d08988027462868a4ca81bc5d6d8db6b3ad2edb7780d2f03731b05221e80ae8388efe25bb02858b01d791daf4fc1d96c5c3c2fc3de5c5e01c","ssdeep":"","tlshash":"7d513290b615ac30c25311eae0bec15db2fe29acf5481cac80a9e4fc5e7dc4c7417936","first_seen":"2023-03-14T06:48:06Z","last_seen":"2026-05-30T23:38:31.007587Z","times_seen":732,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/bootstrap/js/popper.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /bootstrap/js/popper.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6545\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18860)","md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-04T15:32:32.280501Z","times_seen":6318,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/main.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/assets/css/plugins.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8577\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58241,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (383), with CRLF line terminators","md5":"4b9f6993d904332f6f37882bfa8706ca","sha1":"6bd3a1074badbe20162da42a2ff9d00eb69955ad","sha256":"a201c320b2b4e4726b60cf5b45c183a307abd2ff8b0b675928ca1184ec987fb8","sha512":"36686af141b5949011922c68816d2bfd62bb5aaa8bdd338239b02a7b42f0175e3e361b2a23046263b91a0c0234fd2c8929f662c8ae355141fa3e0fb3b4d4da9e","ssdeep":"384:Lb0mNZ8ABSYshU0v0lD81+WYr8Avrgce0:Lb0GBSYsKi+J8bC","tlshash":"3b4343b9fa80214731338b68a3a2ddd3efaf12d39901077e7b5562904bb919c1d34f99","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.028902Z","times_seen":625,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investintsla.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 10:31:28 GMT\r\nexpires: Sat, 15 May 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96186\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-06-04T16:39:58.560319Z","times_seen":11033,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investintsla.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 10:31:28 GMT\r\nexpires: Sat, 15 May 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96186\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-06-04T16:39:58.560319Z","times_seen":11033,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/img/favicon.ico","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 23 May 2026 13:14:33 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 486\r\ndate: Sat, 16 May 2026 13:14:33 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"931ea8cd3a41718c6ce90b75f62066b6","sha1":"e6f689b5240837b501e19cc72dd2824181165428","sha256":"34dd7cba33d56d5d7adbf18467a2a406c5718688ae96e9f3efff200c01caf550","sha512":"e120a76649de10222cf67370baa83280d9b22846ae33daf864c09f4569ece206c690c21d59fcde97dfc3471d510e14f511a3c6eb464f72bee46443c796abc494","ssdeep":"48:hlVygkEKUKMl4pDL9yOUIySXyiea+F+QqoDvrhCjes:hb5GpmTwxj3","tlshash":"3291871c73306057cb03557cde62c17a0a186cff442823f8a13a324bbb5a2b5cea2831","first_seen":"2023-05-25T00:06:52Z","last_seen":"2026-05-30T23:38:31.041586Z","times_seen":791,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/forms/theme-checkbox-radio.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/forms/theme-checkbox-radio.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1261\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12469,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"96d512e2972bee7d01467dc112b3f163","sha1":"f04decef5d75a71835a8e3f707cb9d90f4178807","sha256":"6601a2970c1c66f2821fe16ad40666900c024f68ea851d0a6d13d8d69b62a7f2","sha512":"c3effc07fbeedaab25bec558eed5109cc60823a42c49932ac718ae53b0aa44457846c579ebf82b6dfaa2059395c20c582bafa8fe36b5a796762fdc9c2124b209","ssdeep":"96:w7dopFtFRrmIQAmYqDDkWtHiFzF1/6oXAsC:w7dSFQAMDDkWtHA/6oXAsC","tlshash":"bb42073bb52d02e221b261787edfc1419325cd97a3402aaa74de79311ffa4853523afd","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:30.990731Z","times_seen":653,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/animate/animate.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/animate/animate.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4123\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c85b8215d444a1f260b065632309ff9d","sha1":"4f96419a37e6e3f38e00dd715a6fdd7ba3eda5d7","sha256":"8e80ad02a548750798c2a6d77655c27ff2d620b79b9e0e7dd59be88075b3bb7c","sha512":"0740a00ce4a59625558341416a279138030fb235fd1f75d432d5e2b18b67d40d9d4b52be40877d3e3ef07d514ce113ffd77492ec9e66ea2cdd40249b176f1b1a","ssdeep":"384:ux1E1FplY5Y31k1XYEYn2W2Yvlv8UXY+Y7VQV4YuYglLC37nqMOjTrm/Xi:01E1lY5Y31k1XYEYaUXY+Y7VQV4YuYE","tlshash":"fb730b6e184111c447724f29d7de8e28eb3991731c221dee73c2588b9fa6fa853c994b","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.035406Z","times_seen":684,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/elements/alert.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/elements/alert.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1129\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6451524c7e20a997c4765bf16bedd5c9","sha1":"d7ed9847b7ca46d289ebd476031e449f963aedab","sha256":"f506a0126e9f67aeabb80d22864e9f7e27406681c3c5071eeecd6b8e99b18a64","sha512":"0a6dce02ca19096072440f5e7b5b51385b8231dd4af391f230696576d877161f8ec754a7079063be8a465eb8e63b4f982b60ef5448401b54ba9c7312ab977ed0","ssdeep":"96:9RA3J+dDfFC9DvWaNF4zbIiWFjEFj3E4p/cwv4BR:36gDMlF4zbIi8Cj54BR","tlshash":"7ab1cda9ea110ec7a3338b696358c681ff4922d3c9071b7dfb8572184f38548293afd5","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.01518Z","times_seen":586,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/sweetalert2.min.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/sweetalerts/sweetalert2.min.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3827\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26762), with no line terminators","md5":"090412a4abe43da8a23147886cfa462c","sha1":"6216987d5eb6a3a227f4e9c8f7497d4638688170","sha256":"c909c661b1a0b37970e29b8c61dbd72682b3a17159cbc001f5382ad2e9a8ba12","sha512":"2dc57547db79b821c854c792bebf66a1522b098c910909082b404391c4031e7eebab334f0d375e91dafdaa72d611b3783f5ec4a7ce6a56dae3bafac30e5b2cc1","ssdeep":"384:f4zYXnZRmKy74kQieS+GFpPqTRhZRq9Cdw99xU/UNAF3J:f4iSKy8kdtAF3J","tlshash":"30c234534881325be51b8f2592c8e95822e4c107fd730eee7661e105cf93fde16aa39b","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.03619Z","times_seen":729,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/libs/jquery-3.1.1.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/libs/jquery-3.1.1.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29460\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-04T16:40:36.23384Z","times_seen":143337,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/bootstrap/js/bootstrap.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14365\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63188)","md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-06-04T12:57:56.896557Z","times_seen":10284,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/components/notification/custom-snackbar.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/components/notification/custom-snackbar.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 579\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3256,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2f3d504e84db5b77a1dfdbe2ef84b334","sha1":"3f9087ee9fd0512058165aa215798a3cd18177d1","sha256":"1c1c2ec41829211636686ac910a1f090d201a4508f15b05425af99196169b808","sha512":"2b9d38a6efb1b83050d13e03b16417bf60822ce5a0a855dc4ea3e9f1d0c72c728818e31f0632ea8fb96eafd9348c714e685b7cbb321ccf879c6e58709910b713","ssdeep":"","tlshash":"d8618bcff049729a06336fb9c4a6e808c2762ecb6545961e3d3c43165f780d83ad2f64","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.033802Z","times_seen":654,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/sweetalert2.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/sweetalerts/sweetalert2.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14088\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33665), with CRLF line terminators","md5":"e0fbbb6a962394ae43fa921d9faa998d","sha1":"d77926e1aaf9a37ace3f1a3beafbddc5002bcff0","sha256":"e3414f979119f198d602006e67fce8956948983d6899c8d9cc17eebffc32c479","sha512":"4ff0ed797ae5e7895ee3093ab640d96de1c607940756c0b059d3e067c4f89acd34c834ed07beaa2c1aa36ac7d3283a7232de4deea73825a5510bc9b7482c58fc","ssdeep":"768:dnSVclYKaoe+QPLriy8/4tmk0t/LuvRuj2uYT3mNbZL2kp2Orb2hVWBZv8KZe2TJ:Ns3+iriysvCcjdEW2Q+2v80","tlshash":"b7433a92698031279a3b8a7515ded50c76b89116fc330c98b118d0a44fffe8f15a7baf","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.0167Z","times_seen":676,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/plugins.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/plugins.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 172\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4e4a1a5c2b404a77ccc103b770b6e7ca","sha1":"870c272137486352e6d8413cf580a6fc6e56c40c","sha256":"f55ceb31835b83a6a75f27fccdaeb6ef2bef082453aece54346a35caf89237cf","sha512":"53586a1765d13839e8dd8d99b4193ad4091ffd65abea0d34445a4e87988e22475b7bf96914e2e7db0cc1df692ec310a0f123a99e23a8843268c2292a6afcdb2c","ssdeep":"","tlshash":"66e0260ad85022a103b6841718682b1a535c1ec67b5eb134393c637c2bad5bc812411a","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:30.989906Z","times_seen":777,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/forms/switches.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/forms/switches.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (335), with CRLF line terminators","md5":"e998ae7c66c7a1c2c694f4c2ea76764d","sha1":"f8e7034092c985075d648ae15281916d20118f00","sha256":"a0666a558cda37b0d7f418fe026dc2b0dd61cec0c0d9849e3c0871d3bcabf6ed","sha512":"44d79f20908da54eeb74a0d1d598129ff6f8a1503b8e736582e2f980d9483662a10c4b0732802c029d6442bf1c9f9d2f24c95158d14ce0d367bc940b59ed287e","ssdeep":"192:d9z0HAPlSgf1eizKEjksS06n1L8ovK3mr:nwml3Jj/gr","tlshash":"7ef179b69170400d753682a5fbc4cb52eb6f21b5a50c9b35fab71428ce712c4fc3a6e8","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.00253Z","times_seen":731,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/app.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3316\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18388,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (432), with CRLF line terminators","md5":"d3ad35296c4d333800ca20e5f8d7c7cc","sha1":"0d2aa22c151cc48f26aef1af609a23ebaf693cb2","sha256":"dfa8eec1b9bca04c2568b54524800ce1d16b8dc4f8d70fc5d5e998a161640b34","sha512":"d2b0193acb36050a04a32686be19c4bc31894e2d69df414beea51da9631480c01eced04209f19239a391caa9b7305d9d3c2b5a4727224ebd5bdee71fb13e855f","ssdeep":"192:oFaemsrJGp0MnD/haM40tVQKv9JSRqWNbPsTvsm:oFaeLrJ0gOtiKvXosLd","tlshash":"788241587420116190ff737f5bfb2168fa3a0a6bc1014611787c8ee92fb1592b2a5fdd","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.009731Z","times_seen":674,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/highlight/highlight.pack.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/highlight/highlight.pack.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7390\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17197,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16755)","md5":"667ce8066c12c1af9014e740143c39ec","sha1":"dc0c9e944c29e836b2ec56648fbffbe03891592f","sha256":"193aa4e8c74782571fe80c33c69f93978a955c3fb7644f2135c747d98e575696","sha512":"453586e63eeddcf4996c77edcacfe77ee4fd1624c464847ce4ca867bd677178e3b2d123e27897aad0cfa924bd7a624c14095716598c1bd1f8c1b873477a435fc","ssdeep":"384:mjhGmg3ZCLQKkLJm7f5tCLwyor0MHMQMTob5NCp3FET329w8N:X3ZCVkE1tIw1r0MHMQMTMaET32i8N","tlshash":"9a723ccdba177a270a5200f2b08f6506743e7cd7304c9464e756dab86dbec6892b5e3c","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:30.998205Z","times_seen":716,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/scrollspyNav.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/scrollspyNav.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 357\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":677,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"8288e59fe940b27dcc79c35ee65ffb94","sha1":"f2d103f3cdc2d9938afc6ff297b3e8a8f22630a8","sha256":"ab2d81d45430bda61ce61ed5556dfd0b83b613d592288f91d93fbb0c24b20d60","sha512":"ae570f9e45f29b5d2d9235cd4063e17b646b330da0adaea328b254c00e84e76d7827dcaa6cfe484ecfe46897233faa43eb42634ccc9a68dee964e7be2721ede3","ssdeep":"","tlshash":"6f01d391a71960912df8676b4b1d754cf350419f960b9d58389f0fa81f3112412f6de6","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.010741Z","times_seen":694,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/custom-sweetalert.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/sweetalerts/custom-sweetalert.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1678\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5898,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c8210ccfa29b9380912ac8bc4f05fbf2","sha1":"ff1f62152801528b47ecb10ded333a7042967362","sha256":"90726872bcd80da5a3230ce4001b05bc34b44edf153d875622cf4e3e2fddccf0","sha512":"effcd1261f519241b070ccaf3f915f653af2a80030012d4236683811dc9b6b8107c2f3b63b26ed48545317aa949c52b67a277f169088b9b69f6d995a41eba2ac","ssdeep":"96:ZJakHZJ+/28lM0RGiBI2krV26D7h8JwTaO3n5kntL:Li/5MBLPrl9Ta1","tlshash":"dbc1c1fa95b80135892bb4a0989f381967071047ce45bd787ced43b02f9c67da0fbe69","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.017631Z","times_seen":709,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/perfect-scrollbar/perfect-scrollbar.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/perfect-scrollbar/perfect-scrollbar.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/assets/css/plugins.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 564\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2608,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"f9202ff9b053b3594487b2f0ac71cddb","sha1":"a769a5532ad2f2d0687beb498e131c84ed2f8a28","sha256":"96b835427aa106d7b7c152fb657a53b7f57c9bdf49fd7ad8c3609e8bc952fa72","sha512":"673b1787381257cbb235b7af7b79c05d0ef3dd0477d923e47937f1b2bd0deb60e0907235816ebee00dddbdeac9f95853e0236f1cdf0bb148f218f11a1914ef72","ssdeep":"","tlshash":"f551cdbb969526c1321b665e1beee705333f00c2be47ca5cb69730c46b033ee2536580","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.018379Z","times_seen":643,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/promise-polyfill.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/sweetalerts/promise-polyfill.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1103\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3133,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3133), with no line terminators","md5":"7b573a7b47496b092478720a088dcbc5","sha1":"2ef8b544741b8fa2266bd6a06c45d74607370b21","sha256":"0e24697d795236d0b673f19da3d12a174f65039d90490c089ebd8f56f2127afc","sha512":"5137c8b811917b0e8f495faf08156644e8b172b2304c12ae942290b3a469beb6d6648e2636b696f4783832f7f8ac08d5535d85681deccf577601357a3694201c","ssdeep":"","tlshash":"4e513e4dbb74b06965bb7170812f600ff2b6583638ac04a0e611e4f83db691d8b5bf4e","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:30.981338Z","times_seen":742,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/sweetalerts/sweetalert.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/sweetalerts/sweetalert.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3198\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3f62d4fbcd614e748448c5339511b822","sha1":"acf7eef4c8a4002b875f2a637fd59a8d0d0db397","sha256":"55d606d6e3ad5945b93e8b0ac8ab1e5a4c26c6509cfdd98bbe06889f9a375f2d","sha512":"e67be2585509044caa33d0dcf826dde3bc87a9e6d9beb21903827eda56ab420db8dbf3bb4980004bcc446b85155a0392c8a7d2a354c25cb55aa4247992187152","ssdeep":"384:2FebF9lBFRCFgFpdWtFVxhE2Qft4opUpbpUpq:2F0F9HFRCyFpdMFVyqopUpbpUpq","tlshash":"41a234fa5de30542b9178b5517ddde192ba480431c2edca8bb9ed108cf87eec10d6b86","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.003238Z","times_seen":691,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/components/custom-sweetalert.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/components/custom-sweetalert.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3e78130ed89a49e77e923ec9b3b0d8d3","sha1":"6816ce2a6d0020bede094134a450fce3513d1a3d","sha256":"208ef1803c4e1a0e20be49cbea1eb99e04d77f535a19c35cfbfad558382a2aed","sha512":"f68be63a2417f2f07f49475a27f0357bcdca822e5f42029dcd8be81227736ace922aec205a45232bbec5b3071412f42c1e8f66a3b827440518970c4cdc38d4e1","ssdeep":"","tlshash":"1cb012c53a200800c1313082c093bc85a2051ef9d044e8c364c01404c0483e9000161d","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:30.993987Z","times_seen":633,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/structure.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/structure.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/assets/css/plugins.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6888\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ab3ea1a95a79b499b4151928f18347ae","sha1":"26c06e5cf9e054007520de88ccb4335ebb757462","sha256":"3382c989b54bbad53a78337d971cd6adb3a1afcd468b30c606dd80949a55d13f","sha512":"030598f92e592e9299369b70622059aeef1124b9f19fc122152ad2ef6f33616abb24f0eecf3643bc376feae0000b77b7e48bfe45ab36d139501a49d037d7896e","ssdeep":"768:tUXIWib53w4ARdT1ejMEaBjeVz5sIT4VyLQDJLUBYFm0ihjs7b:tU4Wib53w4ARdT1ejMEaBjeVz5sIT4V9","tlshash":"2e2352a9c990340421b1626c6bd61726deaf04979a02c57b36bf528cbff731c8479fd8","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.029698Z","times_seen":619,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investintsla.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 10:31:28 GMT\r\nexpires: Sat, 15 May 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96186\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-06-04T16:39:58.560319Z","times_seen":11033,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":89,"dns":2,"connect":16,"send":0,"wait":29,"receive":8,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T13:14:33.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2316\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":8745,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (369)","md5":"6c3b25e6cf7a95ebe6ccb2932d421f48","sha1":"1168ddbc01a67de86ca42e431150a21bdfb60183","sha256":"41e3e2e6b8d784421bbe0db83e1c8e4c941501ccafaf81144e7e4c99106aaceb","sha512":"aef4801fa9b8560025f9df265071183b525e049e5b06fc937c4b8e1635a2856283172ee7ebcaa3c8ccff7053cda83d0a92a2dafb4e0a884e2edd23ae373a43be","ssdeep":"192:WeYCKIgNP7Pupzdgub2MX3JVpfGVlR8sFUB+YtiN/IP4wI4xyUMM4:WehKIgNP7Pq6gxeUB+Ye/IP4wIuyPM4","tlshash":"c602c71bac9a48a950531999effb7605bae14243e30dd91879fc152c6fd8acc4433f1c","first_seen":"2026-05-16T13:14:59.91825Z","last_seen":"2026-05-16T18:06:34.775043Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":54,"dns":14,"connect":17,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/notification/snackbar/snackbar.min.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/notification/snackbar/snackbar.min.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1283,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1283), with no line terminators","md5":"5d466f02e3f0af5835bfd9bebb02c232","sha1":"abca4aa378fbe4457385721d3f0fe40be6931af4","sha256":"f6ff2d964280cee770b7bfca7026421fc8611ceec94d663972cafacb52f7da5e","sha512":"cbba693f438078850d67d78bc848e100f1adecf60842865ad49ea64e396c5d40683eaf48218f6672dbf91928fd206b5b46246b95484cf23a24ea08f2d5a4592e","ssdeep":"","tlshash":"3421b102e665a01d75d9829ae9d1b2fc93ecc803f39d2aaeb560692d428d2c82163614","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.009018Z","times_seen":730,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investintsla.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 May 2026 10:31:28 GMT\r\nexpires: Sat, 15 May 2027 10:31:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96186\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-06-04T16:39:58.560319Z","times_seen":11033,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":94,"dns":2,"connect":15,"send":0,"wait":16,"receive":15,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/bootstrap/css/bootstrap.min.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21653\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":161409,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"d432e4222814b62dd30c9513dcc29440","sha1":"2cac4afc120983921411296bd4e8fd8a94ba237e","sha256":"4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601","sha512":"3f9320327d6304dd356ac060534cfad10938431897a3cebec2515a84aaec41fdfb73d72ba39d7b5b35523cf575b432b3864bb6889d855602faef01b4dd21a734","ssdeep":"1536:iC7AIJkTR+rMqFVD2DEBi8yNcuSElAz/uJpq3SYiLENM6HN26R:d7XXGLq3SYiLENM6HN26R","tlshash":"8cf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T05:11:52Z","last_seen":"2026-06-04T12:46:15.136225Z","times_seen":13025,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/highlight/styles/monokai-sublime.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:34.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/highlight/styles/monokai-sublime.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/assets/css/plugins.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 399\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c8b4c0e8a584e7142b08d914644cd9d","sha1":"e4f3df87cbfa634c86b489e9cc43acf44d415986","sha256":"fe66aef28788cf660b2383fefb69c360a3c1262f17aee1d3aea7cde5bdc914c0","sha512":"194aea2207279471d9292993719b7e031528cd8d63cae4b0cfd79c25dd48c1af2b2047c33dfb9c5d5888287ce6115e04a5cc3d9040e8ab590d7d050fab5f4496","ssdeep":"","tlshash":"7911c0429b720f1234efc99b28869eb5fe9f9cc15d980bf92bbc50390809412f538d5e","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-06-03T23:32:57.727625Z","times_seen":826,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Quicksand:400,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css?family=Quicksand:400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 16 May 2026 13:14:34 GMT\r\ndate: Sat, 16 May 2026 13:14:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5004,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eefa8f1d195894d8f04c3c7e64805832","sha1":"43d600a90bea54de6a6767e6b577c4c45c6902d1","sha256":"1e557edd06c30a2b9100847a15517e50862a1129e9d8ee1d82c7d502211e972f","sha512":"4807866e1eab269b83a79cff8c1e452e9cab08184fedd3cbdff6ae6e5ca813bb9e94e79f0ae6d31ec4663aa6d6893f4287bba10c2d9c7087bb46ea6048cb2d06","ssdeep":"96:cqOEaPpOEarJc+uuOEaLNDqOXaPpOXarJc+uuOXaLNDqOxMaPpOxMarJc+uuOxMs:cNPmvWVOPFv1VrPcvMVEPjvTK","tlshash":"2ba1afe1447fb510db871dc122ce7e32ae4ea1547061c9799ffd1c88ac9ac26339572d","first_seen":"2025-09-03T13:56:57.258451Z","last_seen":"2026-06-03T18:36:21.985802Z","times_seen":1767,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":187,"dns":3,"connect":28,"send":0,"wait":44,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/authentication/form-2.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/authentication/form-2.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1373\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3c1946d73d3a2e1524ea48d4b605e5cf","sha1":"5c0a331cb2fcf69adeeff30fd77d4548eaaef440","sha256":"240bb14370eba042bd25ebfb485c6766eb388bd0f642db65e5f4d00f8f6b81d3","sha512":"99eac648b4d8bc9217ccded1bbc6e56f74342061f24ffcb1a0900dfdbe2a4ef1185d650cd3038108b47cbf6d6628ac135658c37d33280b66477b1ed323ba5009","ssdeep":"96:8+pBtIFue2eGe73/cakexqhLysb8PFG4oWNMy/3BF918Sx7c:8+pBtle2eGe7ElasqFG4oWNxp1JxQ","tlshash":"70e169554630810970739d6dbfe9a6c9eb181053968b013b7a506bde8fed13f42b2bd8","first_seen":"2023-04-11T06:41:00Z","last_seen":"2026-05-30T23:38:31.032219Z","times_seen":550,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/pages/error/style-400.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/pages/error/style-400.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 742\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2036,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (869), with CRLF line terminators","md5":"fd4a7412e9509a1c146eb68b2c0fa5fd","sha1":"041084a5dc3b744b6f6f5153e824666798786905","sha256":"014abc4753b1f6c1bcfe576f38f6b2a01c91ac35f6073042efa5aaf14e79e1be","sha512":"313245aa1ef5da3f6dc54be24442d8785e188c50a56829dbdb55878cf7e45d85c91f5972ad1647b5133e79158df68feafaa5935bb07e729ee943ce6b7b1cd343","ssdeep":"","tlshash":"b1410054fb916043be39c963db12e90ae30ad58f975293357e64270bdbb829109387bc","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.027222Z","times_seen":550,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/css/scrollspyNav.css","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/css/scrollspyNav.css HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Jun 2026 13:14:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 473\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1634,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ebfe717746e6ce257401f2cc6cbf44c0","sha1":"5107f53c9233bb785d5782fc76e39d8ab0476ca1","sha256":"85d14da570484807eb61be5ffd9a870d0b07ccd9d609e1054169cd9aae30ad30","sha512":"007db27d9d052bb1239a82ee6dd34e4255dbcededb203edf14a36508a7757ed0cd6763571302de4b154762c672374d8470483eead3f558ff58252659756c692e","ssdeep":"","tlshash":"11319d26fe4425416233c6a8e7a3626cea9c516f634b95bcbe98b210cfb4194c460ecd","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-05-30T23:38:31.028038Z","times_seen":597,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/plugins/perfect-scrollbar/perfect-scrollbar.min.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /plugins/perfect-scrollbar/perfect-scrollbar.min.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5195\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18291,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18216)","md5":"4a10bcfa0a9c9fa9d503b5a498cac31e","sha1":"c4f6c403e99fb37cb496c3844b332823db7c5837","sha256":"a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634","sha512":"3554bd9ee0ff3dee5b9c2badeb76402408f92f2f88e55d4bc3218602d2a0d019175215aef025bde97c3964d431bed0b36401f6762f78ed4279c73cf169201695","ssdeep":"384:KycVuy6etbUgQMEi4tKmvwtp/L4VDgveAuH/jDZ1OWoxKjTUpBlMn1deF+Rd6gjj:bcVLIgQMEi4LoUVDgIOWybI7joi","tlshash":"f8822b98321134b851ff68add48f470e73366013b74f04e8a554dff86aa87b56262f2e","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-06-04T13:14:35.031222Z","times_seen":4139,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/authentication/form-2.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/authentication/form-2.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 222\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7b1c7355c5d7ffd950ba51bc1dbac889","sha1":"7ec25f8ed54b9536c51770bfc3ae75c7b3511b8d","sha256":"58ff07b8e8840772419cd6ce798c3b7e1e4e8d39efddab72f82407bfcd51e565","sha512":"422b0c69ab4d93035581ac848bf83375bb9ac7532fb2dbbb7bc96964ddfaf9bcf1b5c1839927d190f8d03858bb9c72a486e77e65badfc7b6260d2716eab2d95e","ssdeep":"","tlshash":"0cf022bb26910c32f36aba33a07e7319f97480150a06f642393cca5c22b5ec26975bc5","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.032982Z","times_seen":715,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investintsla.site/assets/js/custom.js","fqdn":"investintsla.site","domain":"investintsla.site","tld":"site"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investintsla.site/","date":"2026-05-16T13:14:33.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.investintsla.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 May 2026 09:40:09 GMT","end":"Fri, 14 Aug 2026 09:40:08 GMT"},"fingerprint":{"sha1":"42:88:3C:28:90:58:01:8F:8F:87:6B:0B:98:88:F6:F6:AF:EE:9C:59","sha256":"A3:BE:42:97:1E:6A:B7:FF:F7:20:48:08:AD:07:E9:74:BA:60:BC:24:20:FB:FA:BE:1A:8A:CB:DF:2B:74:FA:4C"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: investintsla.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investintsla.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6012b98b12bd07c18fd8be753ea39688\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 14 Dec 2022 11:49:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 837\r\ndate: Sat, 16 May 2026 13:14:32 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f92a9fbd40e1564da082d7b09cb6a2aa","sha1":"9189f8b28ce98b0a88f9d5cbaaa5c4b0ca39d77b","sha256":"a6e7c8756667f3f480f1eff498654d182c65f0576c3828af374c4d74ffb55bd1","sha512":"a6f728a94dfb51ca89b42499c5badc4e0ec743d82bccb885ea0f29f6936007c183706bff691ef7912b11d8e7a5b52f00394bc9ab7597b68c843f879605d41959","ssdeep":"","tlshash":"7271eb9de8b351321677235200513c48ff72141f9b065525b8ad06d62f7875c83bbfad","first_seen":"2023-03-07T23:56:57Z","last_seen":"2026-05-30T23:38:31.015945Z","times_seen":698,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}