WEBSITE ANALYSIS REPORT

https://primevestglobal.sflb.org

28 Sep 2026 · 08:04:27.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:03:44.470 GET 200 document 42.6 KB 778 ms 1 alerts

08:03:45.442 GET 200 script 102.3 KB 361 ms 1 alerts

08:03:45.443 GET 200 script 60.0 KB 601 ms 1 alerts

08:03:45.444 GET 200 stylesheet 36.8 KB 1080 ms 1 alerts

08:03:45.445 GET 200 stylesheet 105.7 KB 1079 ms 1 alerts

08:03:45.447 GET 200 stylesheet 3.0 KB 1078 ms 1 alerts

08:03:45.448 GET 200 stylesheet 10.4 KB 1077 ms 1 alerts

08:03:45.449 GET 200 stylesheet 11.0 KB 1075 ms 1 alerts

08:03:45.450 GET 200 stylesheet 3.6 KB 1074 ms 1 alerts

08:03:45.454 GET 200 stylesheet 6.3 KB 1190 ms 1 alerts

08:03:45.456 GET 200 stylesheet 57.7 KB 1428 ms 1 alerts

08:03:45.643 GET 200 script 2.9 KB 255 ms —

08:03:45.648 GET 200 stylesheet 98.4 KB 244 ms 1 alerts

08:03:45.649 GET 200 script 6.5 KB 241 ms 1 alerts

08:03:45.651 GET 200 script 25.7 KB 251 ms 1 alerts

08:03:45.652 GET 200 script 19.6 KB 239 ms 1 alerts

08:03:45.654 GET 200 script 4.6 KB 238 ms 1 alerts

08:03:45.655 GET 200 script 5.4 KB 238 ms 1 alerts

08:03:45.656 GET 200 script 12.6 KB 365 ms 1 alerts

08:03:45.657 GET 403 script 9 B 300 ms —

08:03:45.658 GET 200 script 42.6 KB 258 ms 1 alerts

08:03:45.659 GET 200 script 3.5 KB 362 ms 1 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://primevestglobal.sflb.org/css/alert/js/jquery.fake-notification.min.js

IP / ASN

163.61.188.7

Unknown

Requested by: https://primevestglobal.sflb.org/

Resource information

File type: JavaScript source, ASCII text, with very long lines (2000), with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 28 Sep 2026 · 08:04:22.648 UTC
Last seen (UTC): 28 Sep 2026 · 08:04:53.099 UTC
Times seen: 2

Size: 3.5 KB (3571 bytes)
MD5: f6210c669b515412a0ddbf9a2ae61feb
SHA1: ff26b4863e0e8f95960b61c6f51394acb3969461
SHA256: e0fe8b3bba08de1ca0ef9edbc47fb5e2bb79afe859ad8117e3b73ae4e9c396ae

Certificate information

Issuer: Let's Encrypt · YR1
Subject: www.primevestglobal.sflb.org
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B7:07:7F:5A:BB:BC:9D:30:4C:56:FE:A6:BF:D6:5A:71:B3:00:3E:59
Valid from: Mon, 28 Sep 2026 06:25:59 GMT
Valid until: Sun, 27 Dec 2026 06:25:58 GMT

Technology fingerprints

LiteSpeed (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /css/alert/js/jquery.fake-notification.min.js HTTP/1.1
Host: primevestglobal.sflb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://primevestglobal.sflb.org/
Cookie: PHPSESSID=msm889lr5qrdvoogdeupgcd7o1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
content-type: text/javascript
last-modified: Thu, 29 Dec 2022 09:27:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1184
date: Mon, 28 Sep 2026 08:03:45 GMT
server: LiteSpeed

08:03:45.665 GET 200 img 6.4 KB 236 ms 1 alerts

08:03:45.667 GET 200 img 5.4 KB 224 ms 1 alerts

08:03:45.668 GET 200 img 42.4 KB 491 ms 1 alerts

08:03:45.669 GET 200 img 45.6 KB 531 ms 1 alerts

08:03:45.670 GET 200 img 26.7 KB 597 ms 1 alerts

08:03:45.671 GET 200 img 30.9 KB 769 ms 1 alerts

08:03:45.672 GET 200 img 11.7 KB 639 ms 1 alerts

08:03:45.673 GET 200 img 54.5 KB 702 ms 1 alerts

08:03:45.674 GET 200 img 115.1 KB 894 ms 1 alerts

08:03:45.675 GET 200 img 184.9 KB 989 ms 1 alerts

08:03:45.676 GET 200 img 65.9 KB 1127 ms 1 alerts

08:03:45.677 GET 200 img 0 B 1126 ms 1 alerts

08:03:45.678 GET 200 img 1.3 KB 1125 ms 1 alerts

08:03:45.679 GET 200 img 0 B 769 ms 1 alerts

08:03:45.680 GET 200 img 0 B 768 ms 1 alerts

08:03:46.889 GET 200 stylesheet 7.1 KB 255 ms —

08:03:47.167 GET 200 img 646 B 119 ms 1 alerts

08:03:47.170 GET 200 stylesheet 19.8 KB 194 ms —

08:03:47.171 GET 200 script 285.9 KB 4554 ms —

08:03:47.188 GET 200 img 0 B 119 ms 1 alerts

08:03:47.190 GET 200 img 0 B 119 ms 1 alerts

08:03:47.191 GET 200 img 0 B 121 ms 1 alerts

08:03:47.203 GET 200 subdocument 148.2 KB 276 ms —

08:03:47.276 GET 200 font 36.9 KB 397 ms —

08:03:47.278 GET 200 font 36.9 KB 470 ms —

08:03:47.280 GET 200 font 36.9 KB 455 ms —

08:03:47.282 GET 200 font 36.9 KB 500 ms —

08:03:47.284 GET 200 font 3.5 KB 119 ms 1 alerts

https://primevestglobal.sflb.org

Domain graph

Hostnames

Connections

Network requests

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://primevestglobal.sflb.org

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://primevestglobal.sflb.org

Domain graph

Network requests