{"report_id":"e472e7d8-cd13-48d6-9765-9f58ff8cb339","version":6,"status":"done","tags":[],"date":"2026-03-21T03:50:10Z","url":{"schema":"http","addr":"cap.investlt-dhrbr.com/","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"172.67.143.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"title":"Harbour Investments, Inc","dom":{"size":360388,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48795)","md5":"e7080356e95066e0aec7bcf6882f1b60","sha1":"56c53f5ef2b7bdbe4abbb764eabf1426e87f9ec5","sha256":"3e89036cff3b9c505e8a51c6cb8473d53fe3de17c15908a5b72ae4fe140cc8d9","sha512":"39e33d5c3208ddc4e7d6a1e738369b1401090a0e3d90fcde03a726ba7da2633dbbdc9fb2082c143cbe1214bb2d9354786727793d12496f7f5ab73a61b82f3e82","ssdeep":"6144:Zx2AmU9aGerJ5HjXbQx+PAL5bYnFactV7qJkpApK6HBWJrcsYPgry84cMUCIm:Zx2AmU9avJ5HjXbQx+PAL5bYnFactV7i","tlshash":"2374b93895ed0233417b08d4b276434a75e2975efd9b0960abfcaf980fc6ccad88554e","dom_hash":"domhash28a6b4fbe6fb7bdc64185992b521b1fe","first_seen":"2026-03-21T03:50:23.063752Z","last_seen":"2026-03-21T03:50:23.063752Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cap.investlt-dhrbr.com/","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"172.67.143.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T03:50:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":5,"received_data":577465,"sent_data":2875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.tradays.com","ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"domain_registered":"2016-03-29","domain_rank":0,"first_seen":"2019-04-23T06:28:14Z","last_seen":"2026-03-18T17:48:46.287156Z","alert_count":0,"request_count":8,"received_data":302821,"sent_data":7055,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":4,"received_data":31133,"sent_data":1919,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p-cdn.link","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-18","domain_rank":2989695,"first_seen":"2025-05-28T00:41:48.509993Z","last_seen":"2026-03-11T04:52:22.64101Z","alert_count":0,"request_count":1,"received_data":1094,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p-cdn.in","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-18","domain_rank":1896086,"first_seen":"2025-01-28T04:06:35.642543Z","last_seen":"2026-03-11T04:52:22.42647Z","alert_count":0,"request_count":7,"received_data":46349,"sent_data":3334,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"socket.investlt-dhrbr.com","ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-20","domain_rank":0,"first_seen":"2026-03-11T04:53:31.662869Z","last_seen":"2026-03-11T04:53:31.662869Z","alert_count":0,"request_count":1,"received_data":828,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cap.investlt-dhrbr.com","ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-20","domain_rank":0,"first_seen":"2026-03-11T04:53:31.649666Z","last_seen":"2026-03-11T04:53:31.649666Z","alert_count":32,"request_count":16,"received_data":8093556,"sent_data":7689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p-cdn.eu","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2797932,"first_seen":"2023-04-25T08:10:51Z","last_seen":"2026-03-11T04:52:22.084649Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":462,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc614b6fa5f90c56a4aae4a3ae1187f4","sha1":"ddd5e59e4a58e59cac1678149f5e05fe9d3f5be1","sha256":"485ecc755c0237f0efaebbbb6bc52f122e4faccc7a5fe819773170d524aaffe2","sha512":"1db33136914902feca8bf0fb0044016fe0d747f6dd347fd54255f97dacd310f031d74befdf915151341fa081cc3487ddd5797972dd63e3cfb6fe00522d64b506","ssdeep":"","tlshash":"d7f09088466f4546d8a2e2595e7b9742592488032858d0ca3d4c82cc9fecc3c836cdeb","size":523,"data":"","first_seen":"2023-05-04T00:52:21Z","last_seen":"2026-06-02T22:25:51.018296Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"e08b673f5f5041081702b46bc0b6ea4b","sha1":"07ce55c0752d5921e78ffed87ca5db99f2a85bba","sha256":"bc72343d841beec7b92040f41bc8e273c1d94c4fa01c0c5e82650d294f9ad6bf","sha512":"842aca7e15e07407660305646d2fb69b325ab228b231ac5e1379849b0f37cf8052f6ed3431f2a3902c201af965cba7918f2b0faa01f01f3fa9be9ecc069505bf","ssdeep":"3072:nkpApBR66HBWJrcsE5Pgvjy84cMUCITjR:nkpApK6HBWJrcsYPgry84cMUCIB","tlshash":"9dd38d585ade0237947509b873778241a4d12b69badd0c58cca8ef5c6fcbcdf40c6a8e","size":135554,"data":"","first_seen":"2026-03-21T03:50:23.127934Z","last_seen":"2026-03-21T03:58:46.740582Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9020a37b447e104db3b7100f31edc28","sha1":"e3e8a03f186f0dbefd7b7a457b59c17f92540b7d","sha256":"60b852f8d9657ede2e67dd9656d77175102b4568e00957fa61833fe97fa370e1","sha512":"dcecd89ea4518ca9882091c256d0abefcc4afa291f189b827e15e6b1339883936dde43fcafb7ebef30eaf9fed55f86eb4913fe2a89a2f1bd4a44ede0bd8a6bdf","ssdeep":"768:sBmrS1dzfATL4KlnIuT66mmunXtcaYtK/cxbT:s5LTmL48IODmmkYIA","tlshash":"4f03a3853985263147e790b0d42f120261a34756ac9f4c68af2dffc059f894ba25effe","size":38906,"data":"","first_seen":"2026-03-12T15:05:39.702322Z","last_seen":"2026-08-08T02:48:31.143293Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/js/app.f83a022b.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24b42a85f173498964eeba4bce80aa96","sha1":"3ae6ae840fe8403b84c09578255f397dbad973f1","sha256":"aec0ffbe2db4dd0fbbd170cabab6a5fcf4a07f2aca0af670b0c247d1068b407e","sha512":"58f9919546414c0472738ce8347882086e9f4a76e7da4bba59e39a90c02e028e9a7e9383e06445241417869fc4cdb821f1e5e5f5d2f8f7de6aeacaf2b850346c","ssdeep":"12288:XEBmDuBI84PFlzBPOCZ2hy7wLfVB7zHfitZ6o3QyBNHS0U/rCbdzixCWWPiYkie+:XEBpgh7oT3f8iVU","tlshash":"d4459e28919f57fd5e65930ab4923b0fb4b40cfae093c136566e942d32e3c8452ae77c","size":1196678,"data":"","first_seen":"2026-03-16T05:32:35.960186Z","last_seen":"2026-03-21T03:58:46.738189Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":true,"md5":"b71966bbc31c2ff8d03815636b0209ac","sha1":"20ed907c3d2fd697d69c8d39c0c5a66965eea5ff","sha256":"04b16b5764dfdf77632aa405cb626ca722c7a641374646e5df1522d96261aead","sha512":"3829a01604890d6fd1c4618ed61212a5ac0d3ca2d60971a21730227de0f973b94b3e8b3b81b1e37f18f47d6b1461a0b9acfe2c91adcd4af6fe5d92bcafbbe5ef","ssdeep":"","tlshash":"ebf0ab9e24e88c9696bb61553b7346083562019a244bee31bf4ecdcc6f3cc3a4049e9c","size":458,"data":"","first_seen":"2026-03-01T11:52:36.445922Z","last_seen":"2026-06-02T22:25:51.024024Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/core.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"introduction_type":"scriptElement","is_inline":false,"md5":"375322f8d50cea75c21388c4f0ba9e4c","sha1":"1ed0baa18c9c9b2db118f8308c7f2a7fbe7856c1","sha256":"981c9b6d90b87022f9969e93ac342a73b486070dcff595f59d4bc80541fd0c2d","sha512":"24007d88185c2d9432179cbd44371062467aefb76b58dc21796b81e47d7c23469b544ad11e04f6f1319bf48b62c0e1ad8a191c297f000fb5dc1097687796cd15","ssdeep":"768:85z3e+0SHAmP8WW6uRzFtBNYnaH8/H/MeQUfxh/ToO2NRqIBc9WAVFXh33iN+s6M:85yrSHAmxW6uRR2nac/H/cNRh05oX","tlshash":"0cf22aa97255343553bb107d105f2206f33a6f626d0b8590c126ec943db8d6be37beac","size":35767,"data":"","first_seen":"2024-12-22T16:58:23.312331Z","last_seen":"2026-03-29T04:41:52.9869Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/config.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22c5f5c04dcd6dcdef6f72602bc93afd","sha1":"f643929f2986f7649ad8e730a4490ce1a8f7cf29","sha256":"474051bdd876031c9d1bbec01c9d44822038f08419e35ccc985a6dfb325d33d9","sha512":"76e7db6f533645b3628afde0571f31a121e2bf4865d5e8ba3d497268819303cd77933ba940b757c716c850b4a59528ba7c0fc901b483c33cec45ea85dc0703fc","ssdeep":"","tlshash":"dc31852b1f2afc3ac302ac8f63b81e33624d729d069b5444a08de619df9b5b1e57314c","size":1648,"data":"","first_seen":"2026-03-11T04:53:35.047308Z","last_seen":"2026-03-21T03:58:46.724121Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/js/chunk-vendors.9b4f0ac7.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca191a66900f08d680f349d728b4404","sha1":"f2f7a5c1c109a5480f1e0473d7da70f50b67b0b8","sha256":"3e9d0e1af62c3ad5de956ca0db6724bd073e5decf89b29c96b77ad2665bb47be","sha512":"81d2f25a7fce3be737ff1f73b8535f4cacb609c7cf7cb0286a728b2de384c8cabbce7496608a1a8881b6467c593a541e75d082930c0ca0d2f1bc7ad120c5a358","ssdeep":"24576:QbKdbQnhQVllb0HcFiFGeHuZrJquDU2L4ENn+:QbKdbQnhyllb0HcFiFGeHWrJquDU84K+","tlshash":"8575e988f2647022479a35e4442f150ff236b92d644b40acf768d4fa7cb9989763bf39","size":1629018,"data":"","first_seen":"2025-11-12T03:40:16.29153Z","last_seen":"2026-03-25T13:11:24.325107Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cap.investlt-dhrbr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 00:15:30 GMT\r\nexpires: Mon, 15 Mar 2027 00:15:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 531261\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-08-14T18:49:41.770604Z","times_seen":76322,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /c/js/widgets/calendar/calendar.2c3c973cdaa85be0afda4775b0b51d9c.js HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 12 Mar 2026 08:03:36 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 202\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38906,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38906), with no line terminators","md5":"e9020a37b447e104db3b7100f31edc28","sha1":"e3e8a03f186f0dbefd7b7a457b59c17f92540b7d","sha256":"60b852f8d9657ede2e67dd9656d77175102b4568e00957fa61833fe97fa370e1","sha512":"dcecd89ea4518ca9882091c256d0abefcc4afa291f189b827e15e6b1339883936dde43fcafb7ebef30eaf9fed55f86eb4913fe2a89a2f1bd4a44ede0bd8a6bdf","ssdeep":"768:sBmrS1dzfATL4KlnIuT66mmunXtcaYtK/cxbT:s5LTmL48IODmmkYIA","tlshash":"4f03a3853985263147e790b0d42f120261a34756ac9f4c68af2dffc059f894ba25effe","first_seen":"2026-03-12T15:05:39.702322Z","last_seen":"2026-08-08T02:48:31.143293Z","times_seen":109,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/tr?event=Visit\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026ssn=1774064992274696608\u0026ssn_dr=0\u0026ssn_sr=138\u0026ssn_start=1\u0026fv_date=1774064992\u0026back_ref=https%3A%2F%2Fcap.investlt-dhrbr.com%2F\u0026scr_res=1280x1024\u0026ac=177406499240263073\u0026sv=2552\u0026fz_uniq=6379326452795017056\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A108%7D","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /fz/tr?event=Visit\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026ssn=1774064992274696608\u0026ssn_dr=0\u0026ssn_sr=138\u0026ssn_start=1\u0026fv_date=1774064992\u0026back_ref=https%3A%2F%2Fcap.investlt-dhrbr.com%2F\u0026scr_res=1280x1024\u0026ac=177406499240263073\u0026sv=2552\u0026fz_uniq=6379326452795017056\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A108%7D HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _fz_uniq=6379326452795017056; _fz_fvdt=1774064992; _fz_ssn=1774064992274696608\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 70\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-service: Finteza\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"48b7a1e65c0e92830152164b22a7c37d","sha1":"16f99525ed7feee4e80d1e32df48d36286cdfca4","sha256":"e3849fdc1eab88579b20b1b56875d6ef8299c4ad165e03921400ccae69149861","sha512":"8846633046618696dfe7dcf6397d2588a8334dd2349b1300eff197e336ff3193a83ab8900d6666a0d7a0a6f797d323a4aee2bd05fa7a2eb8b888f3ea85459489","ssdeep":"","tlshash":"c2a022e333c0bcbcce23803300208b38ccf0c00000200e0c080ec83f2e08200888aa83","first_seen":"2023-04-06T23:51:49Z","last_seen":"2026-08-08T02:48:31.129491Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:47 GMT\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4313e6367844adc0cdb4d6ccb86b26fa","sha1":"20335f134c7817c1e9d01f8c57fa2a36669af65e","sha256":"d6a90916411b5b4b696edaefd46fd4503e5bc622c14e490a09cf0de39696d418","sha512":"23a3392e96d2bb29dd720e4e65ea2e398651f8e7626361425e932732f1efa52dc14dbcbe5751ed7137e69916480f3fd2be5ebf4ef39a43c6c6200c9e777c7779","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpQ:lgKQcXr3lVwa3RzJZ","tlshash":"f7a19bd1087be114ab831cc123ce7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T01:34:36.284919Z","last_seen":"2026-08-14T19:17:12.610833Z","times_seen":8645,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":84,"dns":1,"connect":8,"send":0,"wait":34,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/js/chunk-vendors.9b4f0ac7.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /js/chunk-vendors.9b4f0ac7.js HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDx%2FghPfxJYKjzms1bxDm0f%2FZhs2oHG67KTxj3uOcIMF4GFLVEcB1ZDUhzbhLDES8bVS3W8FKVmdYIhsrOUMm11ZEXnTidyK0caBBS54INUUAizBKXw%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0b-18db5a\"\r\ncf-ray: 9df9fd1c0877120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1629018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"90a9b81d1e87aefea696b87e77e99c97","sha1":"02305df9ce204756bad939f6d00969a99e824dbf","sha256":"344385b29d35c1fa875fcaba737f1880bf91cfde44d17bdbb76c66a4efd3667d","sha512":"5f547fcc5098f0b87ac64fb42b4af8a34890ff62a06042fbbc702cbd9dcd547128e0bb98462029c5f5063cef41d63248f31f73046f699cada25b6378653aface","ssdeep":"12288:QbKdMyZQnhQamsDQllb0HcPdi7FGVYHoGhUZS:QbKdbQnhQVllb0HcFiFGeHuZS","tlshash":"0625fa84b6647031479a75e4442f144bf236b92d684b40acf368e4fa7cbdd89663ef38","first_seen":"2025-11-06T02:28:19.133325Z","last_seen":"2026-03-25T13:11:24.277665Z","times_seen":206,"resource_available":false,"data":null}},"time_used":1666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":1245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v321/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v321/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMzByHX9rA6RzaxHMPdY43zj-jCxv3fzvRNU22ZXGJpEpjC_1v-p_4MrImHCIJIZrDCvHOej.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cap.investlt-dhrbr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 315528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 20:10:47 GMT\r\nexpires: Tue, 16 Mar 2027 20:10:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Mar 2026 17:02:13 GMT\r\ncontent-type: font/woff2\r\nage: 373144\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":315528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 315528, version 1.0","md5":"add297d5c7f7e4951b552ed75d77dc19","sha1":"0fbc67b92f7eba3083784f0e1170077834ec5323","sha256":"0f08a7c47cd8f96dc6115563d73b5bde650443386d0d70e154d9fc198457220d","sha512":"26825f84fc776b425a4cc6e0c4e4a45933860be51d14664fd83ff0cfb67542c136afaf957d1da8fcee791742ed7a78d2fa202825818442762584510e4c97eb22","ssdeep":"6144:j5S7A/PR/dyfYMvObpup5Pb2L86QPZW8DC6usf3k0S:jqAhUfYMvcuXj2L8dbU","tlshash":"a56423ed1b72a3f92c53e535262d1362cc44942485f4e290fa7cd723e95c295a3ccabe","first_seen":"2026-03-16T22:45:18.205447Z","last_seen":"2026-08-02T07:01:44.556874Z","times_seen":130,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.link/hrblnvestments/image/chart/expire.png","fqdn":"p-cdn.link","domain":"p-cdn.link","tld":"link"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 11:17:25 GMT","end":"Sat, 06 Jun 2026 12:15:50 GMT"},"fingerprint":{"sha1":"BB:CA:42:D4:0C:12:40:5C:1B:0D:59:50:A2:5E:54:10:42:10:9B:DE","sha256":"B3:03:64:DA:AC:40:35:A1:77:5C:00:FA:AA:70:2B:6D:D7:1C:62:A7:9B:E3:E0:83:84:29:2E:C3:B9:C8:2A:5D"}}},"request":{"raw":"GET /hrblnvestments/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 430\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bdce01-1ae\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7plJcqQMukHt%2BSP6FqklFrNXP4AWvXbf5eQ75NyUkTkI4Q0CClAkAZmoYGQO32LSgQD1P9YlyXpX7j4x5fYDeCh6gX6ffWO%2Bumc%3D\"}]}\r\ncf-ray: 9df9fd35d9c976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40f70b5c06b9f4e4e3dd6627bfe8625e","sha1":"3ea3b5a1c9bedd85678e765ebc5e9afe21ed4685","sha256":"5d9d19e539736e08b8eeb21ea0de6daf5ccda26169a9d063782a745be12a29c9","sha512":"0c5715aca5586d87a14c08e29f6a13adf0bfecae4278cb929ae9179671015576d83f6fd892e2d60460c3b55e19a1c4b5857ce6ff25bbfdfeaddfefd858f34ce0","ssdeep":"","tlshash":"e2e023c0eb852832c6c87727163f420c69bfec805c049ddb0159c4fa616860110d5681","first_seen":"2025-05-28T00:42:12.46262Z","last_seen":"2026-07-27T04:52:14.03347Z","times_seen":244,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":67,"dns":47,"connect":1,"send":0,"wait":99,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.eu/hrblnvestments/image/chart/expire.png","fqdn":"p-cdn.eu","domain":"p-cdn.eu","tld":"eu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.587Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /hrblnvestments/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T19:46:19.165243Z","times_seen":17891903,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:56:32 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 78\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":69967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f1b1b50300b51fafd8d2b3890788973c","sha1":"e3abd49268f0b4fc92c628b200eb28d97ed0979e","sha256":"70de234a7d4890b5ab7f3b6e8bfb08452a0d6f2cb5736a40681b5eeb03bad931","sha512":"ce87389469ad8a1fba794752f0077913aa778f15e61fbcc771783f621f3f16bb5fb190d93a786b7c64e315ef87b33e7c79ec4888192048a135ef6d267f30f4e8","ssdeep":"384:iktR400mY4HnMBEBmFLfPGcuzWuCoT3/Rjr2so3sNHLpWLaLr0wMNd45G6dIrdS9:JMBEBNZfpsYdE5BjVqkMnnsV99IN","tlshash":"1d63aa678f41312ea033c4389ac19a417b295221e6273ef7fd59ece883ca5875777e09","first_seen":"2025-12-19T23:35:14.892295Z","last_seen":"2026-04-09T01:52:19.857958Z","times_seen":232,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/i/filter.svg","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /c/i/filter.svg HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:48:44 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 93\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2023aba997321e5bca4fc0530354bb8f","sha1":"858ab65a5d5e900bcfad477c85ab5007ca3b1ed9","sha256":"bd4c622a9df592361a89bf15d1972dc57ecfca0cca7783ff590f6d61898379d2","sha512":"706836535123b6ec02dc5d3efcad74841d7de2898e67e30c688f8d4e6edf3f3bb0eae7847230cfb2873891087265836b7e25d9997548dc6a06f0f4a1c8824323","ssdeep":"","tlshash":"9431c5d8bcd85184a8060351cfaf605756b7b1be328fb7d651282af42dc8b4b1dac7c1","first_seen":"2025-08-16T18:01:36.860891Z","last_seen":"2026-08-08T02:48:31.128667Z","times_seen":269,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/js/chunk-7089023a.12acf511.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /js/chunk-7089023a.12acf511.js HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:49 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kIkH85ofnRkgU2InukYDhzLwRpAAqi20YGc%2Brsa%2FsE6D0XBwFgVRlQ5KfhKsHH%2B4eVk%2BkaBtiRIdqd181lLEaUxtf3odMoylC0RmFYfnOYcmy3HlYo%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0c-13307e\"\r\ncf-ray: 9df9fd291939120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b9b09a3518e9823894d06bdde9d16f5d","sha1":"7f03d312aceb6fe9999652f757ca1a751097002f","sha256":"72d004a91061407e039f2a96ef1e6e41f1d82e31e6237dcf6051d5efdbd7a97e","sha512":"35232a6adf221b232e155a1a0ee9a56876c0813c41fbbe2096490c628d61f5115ea1935d99a10c728ddc969028bed800afd3518bee2f06de372a31800c03d416","ssdeep":"24576:BZZxPxKhJHM4D2h3RYnEdbdG8xt5OgenY6rEAe0:BZZxPxKhZM4D2h3RYnEdbdG8xt5OgenJ","tlshash":"f7255d65635a74ba8969c199a03e0002b1312ed46011c4ddf3fcdde9ab9dc8933bfb79","first_seen":"2026-03-16T05:32:35.940149Z","last_seen":"2026-03-21T03:58:46.704609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/media/orderWin.5f212a12.mp3","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /media/orderWin.5f212a12.mp3 HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 22532\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\netag: \"69b6fb0c-5804\"\r\ncontent-range: bytes 0-22531/22532\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZsRgMzHjowxzJ%2FQG77Pr9pAxlL3HHrz1C64qv5NYx3KkIBicw4IjZ84MQOck0CKM0K17XAnYPyDMbg7WhTHiXlDxBDgPlm4%2FojidmfEhVj9%2BCcMmMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd29393c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22532,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"5f212a12f96c673072f0d44341433365","sha1":"e9b3933c84d2287abf6e5141f434f3efbd60b395","sha256":"6b1283efa7399f55e1336ff845b92bfec802b667160559ad9a59fe5c8f445bf4","sha512":"e6e75be4aa163d7c39d71a616cebdcb91afd5c06dcfbc7b9d6eeb6bab21fd78250873caa43d7777f94cf0388cae12dfbbc7784dd9927d94cdc30471a7c35d0a3","ssdeep":"384:8JM14ZdoqYgqcAoAPsxuA9MYFuLsW9Dj+pG5iPhl/zbZBjYWBmOCKl6tV:ahfoRVcAG4x4pGmhl/PZBYW3laV","tlshash":"dda2e0564f4b76c9fe472b7306a518e7c264aa4303283d538b6863917c7f23fab04196","first_seen":"2024-08-20T10:14:07.555956Z","last_seen":"2026-08-08T02:48:31.137209Z","times_seen":284,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/image/new-design/certificates/visa.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/image/new-design/certificates/visa.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uDzAUr74bPxwyEmsXL%2FXhu35Sxc6piBbTAxcsDfBbHmCGb3gkbbAtIYnZJHFq9hWG%2FEbKLR7mBO3ivLZZRJadx%2F9y15Mg0W\"}]}\r\netag: W/\"69bdce01-6aa\"\r\ncontent-encoding: br\r\ncf-ray: 9df9fd33397e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86f4ba812ef3ed969cf35ae26e195aca","sha1":"376c311d9e592d6baa228573e4427265e1d1e994","sha256":"d7b6171f678716e315803fd2313e77ebd8f08cb59e3aaed5555c1efc9c1c8e40","sha512":"16b4c74cd4e85c0560776573708915502258214adbb93e44725b1182e14c097e607f8a975eb12871828a3947dc5728c6b1755d9bde7edb1b53257f4e79699fbe","ssdeep":"","tlshash":"b63140d12a5420c4ac8fe79ceb6738b1764779ea3a21c671cde0dc82b45815c89d7cd2","first_seen":"2025-06-06T08:43:12.06941Z","last_seen":"2026-07-27T04:52:14.032451Z","times_seen":241,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/img/symbols.824cf6a0.png","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /img/symbols.824cf6a0.png HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/css/app.3da0d8c6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2933933\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:39 GMT\r\netag: \"69b6fb0b-2cc4ad\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHa2c1FdjGpgvbMS3kFuObbhmnS9ZtiI8pJKX2RxBHZ5j6VjnjymnrzsUZOyVHQFWUeUfcSd33QQJNkUa545Qk2809rp7bgevxaSUIUYLM5XTdYR%2BFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd33ba22120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2933933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2146 x 2146, 8-bit/color RGBA, non-interlaced","md5":"3f94b596644f7cc65f78187f0bb4a2fd","sha1":"5e366f75b70873617b6786e4fd161ca94e2678d8","sha256":"76e7b6e7689a3366d692655844dd1825f357880b290861db04650c43f2316ba2","sha512":"06016612458b6c8c144405a8b622ca6b95d85542664b3e7efcab95a0de683c369474715dd47983d9f6d09ea57403888ff04256bdbf132ca4829f5875bfba2a8d","ssdeep":"12288:i3oD1js5x5mI0NUtL5B430sozg6WHcHjKc6odHa6fiU3O9fZvzekV5XyJjU/Gwu8:iFNsKL5flTH76A6ilWfNeCRypU+J2","tlshash":"89253336d4f787fecba95a6ddc2618321074821106bed3b1bdb8e60a643af551107f2e","first_seen":"2026-01-27T02:59:16.782715Z","last_seen":"2026-03-21T03:58:46.737258Z","times_seen":206,"resource_available":false,"data":null}},"time_used":2785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":2432,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"socket.investlt-dhrbr.com/socket.io/?EIO=3\u0026transport=websocket","fqdn":"socket.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: socket.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cap.investlt-dhrbr.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2XphXc11JZp1NPagjTu6pg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 21 Mar 2026 03:49:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: R1Gzv05WjdOG4tDGYf3hUPYrX9w=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LaHntNFfbwrwU%2FSPCx%2B0cMtnuBSbE4IdOryyRNn6EHAv9SI%2FXADf0z4%2BmJdQH91NLUiSUGB8CzsANlXTAnI%2F8IR4mSMYF%2BsP4Zem4ZpyEtE3YmXOuXnzGzvbjSZJR%2BbB8zr00QLBa%2FLblgpC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9df9fd35ca94120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=463\u0026min_rtt=421\u0026rtt_var=156\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3131\u0026recv_bytes=1209\u0026delivery_rate=7607705\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=d30a037f4cddd30b\u0026ts=399\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T19:46:19.165243Z","times_seen":17891903,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":386,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/core.js","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /fz/core.js HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-length: 12701\r\ncache-control: max-age=259200,proxy-revalidate,public,immutable\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Mar 2026 09:15:35 GMT\r\nlast-modified: Thu, 22 Jan 2026 03:47:25 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":35767,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35766)","md5":"375322f8d50cea75c21388c4f0ba9e4c","sha1":"1ed0baa18c9c9b2db118f8308c7f2a7fbe7856c1","sha256":"981c9b6d90b87022f9969e93ac342a73b486070dcff595f59d4bc80541fd0c2d","sha512":"24007d88185c2d9432179cbd44371062467aefb76b58dc21796b81e47d7c23469b544ad11e04f6f1319bf48b62c0e1ad8a191c297f000fb5dc1097687796cd15","ssdeep":"768:85z3e+0SHAmP8WW6uRzFtBNYnaH8/H/MeQUfxh/ToO2NRqIBc9WAVFXh33iN+s6M:85yrSHAmxW6uRR2nac/H/cNRh05oX","tlshash":"0cf22aa97255343553bb107d105f2206f33a6f626d0b8590c126ec943db8d6be37beac","first_seen":"2024-12-22T16:58:23.312331Z","last_seen":"2026-03-29T04:41:52.9869Z","times_seen":256,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T03:49:47.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 18:31:39 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NHxTVYwTcsDpKoyuGG%2FFtbLUDpF1ycHnfY%2FGRfYEkwROF4%2B8f1Z2vK61m3EjkEE6f8hpEkqA41HWw31IxOg65MTATyc3f3cgTaYiOZwqS2yyhB43D0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9df9fd199e130731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"908f8d98d3c551d4a1abc5a641be3f9c","sha1":"be6af1f9557a78313541c71c251ca6df5c98024f","sha256":"ec37e3f6056f7ef1475d659a50ef5ad85f26d35b6a8a608be7c61eeeb4a746fa","sha512":"2ba76eef804e125ac6762e83b6a60875e2582c7e710e95ec8a39752d7e60bac3f30f715d197fd2fe2f88e90420e865932834992331b6d2dee7b94e47a4e003ee","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVLYxDDnSQ4888VvM:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq/1","tlshash":"b1a1a8a35412408d2e22aaa5afb8722ac0df951f9561ec44b4bc02ddcff07d04ae3723","first_seen":"2026-03-16T05:32:35.93237Z","last_seen":"2026-03-21T03:58:46.697405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":35,"dns":19,"connect":1,"send":0,"wait":260,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:47 GMT\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7a545fc21d27fdb2a1505ff2662231eb","sha1":"b507ace02b972239c4281912150b88fdd73e1768","sha256":"783c2f12ef867c5a10da3741204ba0a97bdfadb464c78c2f10087c53193e4d27","sha512":"3d394d8b75251aa828c1a2d2e37eead803d5c40a98904b8fc9c86fad46f327858da33270b8b6229b0f58cf02562b852d89d5fb18fe58ddf4a6cd24e1b13e1a4b","ssdeep":"","tlshash":"76017b58aa565905a1550c53330f3f225e19451b394ad8beaf560d0c9efe8770345b0f","first_seen":"2026-03-17T00:16:36.838864Z","last_seen":"2026-03-26T14:36:28.606949Z","times_seen":83,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":72,"dns":1,"connect":9,"send":0,"wait":31,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cap.investlt-dhrbr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 599525\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-14T19:44:23.003265Z","times_seen":262187,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":80,"dns":0,"connect":21,"send":0,"wait":22,"receive":27,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/brands/undefined/pwa-icon-152x152.png","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:50.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /brands/undefined/pwa-icon-152x152.png HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:50 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0WRMT5GWNaInBsAsiKrRjvM%2BSSMV%2B2WVpuxWsH567K%2BRZ04GGw6pQG9yNLnN7jdUf2csTW2fN0RIF0G9EGvqI%2BtdQWs5JHqgpe11JucubuquV0AaeU%3D\"}]}\r\ncf-ray: 9df9fd2cc979120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"908f8d98d3c551d4a1abc5a641be3f9c","sha1":"be6af1f9557a78313541c71c251ca6df5c98024f","sha256":"ec37e3f6056f7ef1475d659a50ef5ad85f26d35b6a8a608be7c61eeeb4a746fa","sha512":"2ba76eef804e125ac6762e83b6a60875e2582c7e710e95ec8a39752d7e60bac3f30f715d197fd2fe2f88e90420e865932834992331b6d2dee7b94e47a4e003ee","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVLYxDDnSQ4888VvM:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq/1","tlshash":"b1a1a8a35412408d2e22aaa5afb8722ac0df951f9561ec44b4bc02ddcff07d04ae3723","first_seen":"2026-03-16T05:32:35.93237Z","last_seen":"2026-03-21T03:58:46.697405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/image/new-design/certificates/pridss.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/image/new-design/certificates/pridss.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jipAJFTxjJqrt%2BGwi3E6WujbniVXn9xHX4wqdpM8wvNWgqorzgav2xs6FiZWDgGip5TXQ8ktgGJTjNeiNVWaAsrQssQeEFwk\"}]}\r\netag: W/\"69bdce01-975\"\r\ncontent-encoding: br\r\ncf-ray: 9df9fd3339930883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b58a4b2fcf3dc496347888d4951f1d8","sha1":"804c4c11f9a9fbb05674e8a1efcae94d457ba0af","sha256":"1ce2c2c22752886d1f1fdd124c6b68f41eaa8466ac314270a31f03bccab2904f","sha512":"6ea1c05e263abe66faf719cb1fba4792c700d47c0e4ebeab78825e4adae0e1e90633134eee8c0a6d9be0b90c3c3aa4ed43f6e8e3b927e036f55f0f876dc64bf7","ssdeep":"","tlshash":"884195f652f872f0d807e7e8d5b26136362f28765b14c9bc4ba8a759bd2c05c09c9dc8","first_seen":"2025-06-06T08:43:12.056226Z","last_seen":"2026-07-27T04:52:14.103624Z","times_seen":240,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/c/i/calendar/widget10.png","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /c/i/calendar/widget10.png HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/c/styles/widgets/calendar/widget.f1b1b50300b51fafd8d2b3890788973c.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2579\r\ncache-control: max-age=31536000, immutable\r\nexpires: Tue, 01 Jan 2030 00:00:00 GMT\r\nlast-modified: Thu, 05 Mar 2026 14:48:44 GMT\r\ncontent-security-policy: default-src 'self'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 138\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 42, 8-bit colormap, non-interlaced","md5":"471b2e82f315eda4d2686dc8c7a81e89","sha1":"4d9f1a43419636ee4d926f0051e56854fbf81ea0","sha256":"ad8dc5baa0f6f5966e5395be8f5cae0bca67625bfbc748f3543873eb84386862","sha512":"a3cb49c16b59b24b73acad54b51f773bd2ce930d278abd6bb1da0f515816d3723dd327a4f459ff8c2902757f4e1f479d30dd3047dac76f6f303ea4bf75bd4cc8","ssdeep":"","tlshash":"dc516cafe014f430bc1f8494f95850698f8be2bdd91948aaf4db025801ceb9471080c1","first_seen":"2023-05-04T00:52:22Z","last_seen":"2026-08-08T02:48:31.060727Z","times_seen":293,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:47 GMT\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3f76fd77760209859f0632095384b183","sha1":"2c27c7ecf39a90a5b1d153428fe8b74b1fb84fdb","sha256":"25c9a25bdbd2fc34f32463de490deb2ec46ebac48440e28f42a8c397bb2535e9","sha512":"a8f41eeb460b97985ea50afc5589480a28305f8b624808c2e44a9b5e756442c3c7b1e20fb907930fd617190b067bd399a980d0079bfe6a68e79abff856a50300","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/Z:pDS99YURRuWDyjooYhREHPM5svvYaR7h","tlshash":"f6a210a1041744009b834ce223cebf35fe1f92117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-03-01T08:19:07.909883Z","last_seen":"2026-08-12T06:24:40.090642Z","times_seen":292,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":67,"dns":1,"connect":22,"send":0,"wait":34,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/css/app.3da0d8c6.css","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /css/app.3da0d8c6.css HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8pGQSpG2D5Naz2Mllwb65VFfRSAiQWi4Xnp0S0iB2iRlskD562erAvUQfRKQ4lA4j8%2BOCo2vAEZjKKnaq8j9qoLwSkobiS%2B0yKzeNo37sKIK5GD5CY%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0a-1338d\"\r\ncf-ray: 9df9fd1c0874120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78733,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"39c53811bc3fa0d83eef15fd8323ccb0","sha1":"90e4697a2dc3db3cbb7433aacca8868865161b8e","sha256":"099bb46872aeecbc35108edb5345dfc2dee44a717337c61cab58dee99374479f","sha512":"9f4290f56db5cd448c85e148cf927612264a9652a1df9de0a3c344d66b39157e88535c86041f6d55e9ce8b56d1e141e4c77487ac3bcc371f15806bbefb86f05c","ssdeep":"768:9rsvDWrHqf2WI/AWWNohtrsgVQGskmsW6oWoWZfE97LYDjVIeQQQWaFVr/46gAc1:9rsC1Ac0I8fQN1","tlshash":"bc737a114591303cf977da32b4a48689323b9107ae329e3c669b799db3a1de8dc337d1","first_seen":"2026-03-11T04:52:27.201705Z","last_seen":"2026-03-21T03:58:46.729107Z","times_seen":174,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/css/chunk-7089023a.58d0cddb.css","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /css/chunk-7089023a.58d0cddb.css HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:49 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1o5IciI3wb3fHdGTjr0%2F3K8JwcAiKnFS85Jv5KiIVlsXQp8RK2Mtvc7nhKSYXsJf9S4TlweHCrRcuj5UyzsUR%2FikY7Cz%2F%2F1ZoPQPUsHxcdT94eQKRdo%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0a-40b9b\"\r\ncf-ray: 9df9fd291938120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265115,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b5612e3bfeec459ac8bc8ae57e2c38af","sha1":"76f12aeee4ba8c35d3915506ea9c0745972e785f","sha256":"f6c5df1b7f34963da080a1a78a8764d3bb4b6940ea64758c94ba3c975aa9395f","sha512":"863de93b5a7a17a5fb24ac871183a1b3586453b6d9ad20014df39c63fe70cf27c433de17b2f42d757be16718c96528fc27e7484131686168c1e0c1989a075100","ssdeep":"3072:0ZHCyHJP0SQWCP7IjOQOt5qlqR+A5PXGgbg8WTLixK3IHYCLtmcT53IBdYpMW/cN:0ZHAD/3cYpMWJrHHG9vXi+","tlshash":"8844e9a0725c753dbc3be255d5a9814fb124b753c81242defa9162388eeb9d33f36188","first_seen":"2026-03-16T05:32:35.954084Z","last_seen":"2026-03-21T03:58:46.732578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/brands/hrblnvestments/favicon.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:52.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/brands/hrblnvestments/favicon.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5453\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:23 GMT\r\npriority: u=6,i=?0\r\netag: \"69bdce03-154d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVDbQ%2BGwIiD71ahpXH6VagXqioGPpbAyIPCkfPvXEYtcxv3uJQCPJQGVkcMS86G%2FIsj40oAo6U%2FfD95WymzkWBPBPtYpcjby\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd38ca8e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 301, 8-bit/color RGBA, non-interlaced","md5":"a6edbe7aee85068032c79ab8e14da3ba","sha1":"3a621468a680150b5fc27fb886abe05ddb700171","sha256":"5f85b6826f64b8e390588bb96d157b8ee457fb35e535346245c377f198147f6f","sha512":"b54a64e0eee7861fe80a0f8ba8dcaf251d1aa9b50a699f91f572a61600550c4ad155d2f5d1d06af3fdfae0bdcee24c9579498bef416381a9e32bbbb987a64358","ssdeep":"96:yzJ5tZsZp/442swtYAzgD6j+k0RwiqX6K1bE3b7sLVPe79MEEuHghE+hvR:ujsZpx2ftYWSqUnK143bElA/9wzR","tlshash":"41b17eaa45e6377eaac48f37f1ab8dd03719d35ec7067815b9bd0e5c1c6aea00054e84","first_seen":"2026-03-11T04:53:35.004636Z","last_seen":"2026-03-21T03:58:46.725942Z","times_seen":6,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/fz/st?id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026p_di=989\u0026p_dcl_s=993\u0026p_dcl_e=1099\u0026p_dc=1275\u0026p_dns_s=0\u0026p_dns_e=0\u0026p_tcp_s=0\u0026p_tcp_e=0\u0026p_req=0\u0026p_res_s=0\u0026p_res_e=832\u0026r_style_s=885\u0026r_style_e=925\u0026r_img_s=885\u0026r_img_e=1001\u0026r_script_s=885\u0026r_script_e=996\u0026ssn=1774064992274696608\u0026ssn_dr=0\u0026ssn_sr=0\u0026fv_date=1774064992\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026back_ref=https%3A%2F%2Fcap.investlt-dhrbr.com%2F\u0026scr_res=1280x1024\u0026ac=177406499255334468\u0026sv=2552\u0026fz_uniq=6379326452795017056\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A152%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","date":"2026-03-21T03:49:52.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /fz/st?id=xgtwjihqxpekdivhyasdmymldwnqaolegh\u0026p_di=989\u0026p_dcl_s=993\u0026p_dcl_e=1099\u0026p_dc=1275\u0026p_dns_s=0\u0026p_dns_e=0\u0026p_tcp_s=0\u0026p_tcp_e=0\u0026p_req=0\u0026p_res_s=0\u0026p_res_e=832\u0026r_style_s=885\u0026r_style_e=925\u0026r_img_s=885\u0026r_img_e=1001\u0026r_script_s=885\u0026r_script_e=996\u0026ssn=1774064992274696608\u0026ssn_dr=0\u0026ssn_sr=0\u0026fv_date=1774064992\u0026ref=https%3A%2F%2Fwww.tradays.com%2Fen%2Feconomic-calendar%2Fwidget%3Fmode%3D2%26dateFormat%3DDMY%26theme%3D1\u0026back_ref=https%3A%2F%2Fcap.investlt-dhrbr.com%2F\u0026scr_res=1280x1024\u0026ac=177406499255334468\u0026sv=2552\u0026fz_uniq=6379326452795017056\u0026an=%7B%22vn%22%3A%22%22%2C%22cd%22%3A24%2C%22dm%22%3A-1%2C%22ln%22%3A%22en-US%22%2C%22rn%22%3A%5B1280%2C1024%5D%2C%22ar%22%3A%5B1280%2C1024%5D%2C%22ss%22%3A1%2C%22lb%22%3A1%2C%22cb%22%3A1%2C%22ls%22%3A1%2C%22db%22%3A1%2C%22ax%22%3A0%2C%22pm%22%3A%22Win32%22%2C%22rp%22%3A%5B%22PDF%20Viewer%22%2C%22Chrome%20PDF%20Viewer%22%2C%22Chromium%20PDF%20Viewer%22%2C%22Microsoft%20Edge%20PDF%20Viewer%22%2C%22WebKit%20built-in%20PDF%22%5D%2C%22wv%22%3A%227937%22%2C%22to%22%3A0%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22hc%22%3A48%2C%22ab%22%3A0%2C%22ts%22%3A0%2C%22ps%22%3A%2220100101%22%2C%22od%22%3A0%2C%22dr%22%3A0%2C%22bb%22%3A0%2C%22bo%22%3A1%2C%22bl%22%3A0%2C%22bs%22%3A0%2C%22dt%22%3A152%2C%22at%22%3A%7B%22kd%22%3A0%2C%22ku%22%3A0%2C%22md%22%3A0%2C%22mm%22%3A0%2C%22mu%22%3A0%2C%22fc%22%3A0%2C%22br%22%3A0%2C%22ts%22%3A0%2C%22tm%22%3A0%2C%22te%22%3A0%2C%22sc%22%3A0%2C%22sw%22%3A0%2C%22ge%22%3A0%2C%22gy%22%3A0%2C%22dm%22%3A0%2C%22do%22%3A0%7D%2C%22sg%22%3A0%2C%22jc%22%3A0%2C%22bd%22%3A50%7D HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _fz_uniq=6379326452795017056; _fz_fvdt=1774064992; _fz_ssn=1774064992274696608\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 70\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-service: Finteza\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"48b7a1e65c0e92830152164b22a7c37d","sha1":"16f99525ed7feee4e80d1e32df48d36286cdfca4","sha256":"e3849fdc1eab88579b20b1b56875d6ef8299c4ad165e03921400ccae69149861","sha512":"8846633046618696dfe7dcf6397d2588a8334dd2349b1300eff197e336ff3193a83ab8900d6666a0d7a0a6f797d323a4aee2bd05fa7a2eb8b888f3ea85459489","ssdeep":"","tlshash":"c2a022e333c0bcbcce23803300208b38ccf0c00000200e0c080ec83f2e08200888aa83","first_seen":"2023-04-06T23:51:49Z","last_seen":"2026-08-08T02:48:31.129491Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/js/app.f83a022b.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /js/app.f83a022b.js HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpZExOQxrXOzJIut9CrpvjigKwI6YSrEgcVIyMTdjOpyqtxITp2WRzSuyLlkRyNFwwb%2FIOz8uZgNU%2F37BNg789weZr1GQQhutx4rz5kpVA60Nt67nRY%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0c-124286\"\r\ncf-ray: 9df9fd1c0876120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59397), with no line terminators","md5":"0d50666a742779049b56dc6e5629bc3e","sha1":"7cde316d19c0ca9797212e5d4dedc4a7c43bd881","sha256":"bf0e3e42fd4c5164ff4f7621724b8e527f884ee0a9994237dbfcb415c5dda14a","sha512":"2da569b946359db35d1dd498e324dd59d2cf21598289f1cd79105aca9cf2d5929ac50b02a3dac252be05d589b5541e9f2643913086473e051274aee6ea9c2236","ssdeep":"12288:XEBmDuBI84PFlzBPOCZ2hyT6LWSB7zHfN/HzeZ6o3QyBNHS0U/rCbdzixCWWPiYt:XEBpghT7c3fN/HzeiA","tlshash":"68458d28919f13ad5e55a34eb4923b4e74f80cfbe093c136566ed82d31e384452eeb78","first_seen":"2026-03-21T03:50:23.097494Z","last_seen":"2026-03-21T03:50:23.097494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":1033,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/media/orderLose.7aca6797.mp3","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /media/orderLose.7aca6797.mp3 HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:49 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 34346\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\netag: \"69b6fb0c-862a\"\r\ncontent-range: bytes 0-34345/34346\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGyNs41fd1AUQNbDpH%2FM1pEQYvjbYvyKcYlaEsNjxBr52KbZK09JcPqvV5QdHOIzHfqBjtM1hs8ST9ibMOorchXE%2F%2FZ11FqPzfHgfk0nE%2Bx1Zw1A%2FFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd29393d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34346,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"7aca6797b6a15988c0de43b423f1ed8f","sha1":"0ccffe77c793970f0f50151a0448e1fcf2238014","sha256":"0d5aa15fad454cdaa4e8ee01d040b2d039f8d37d43712ef1fee24c8845783994","sha512":"e40d5b8107e52bf413973d4d3ee44fd97f65b343b243188134cff24846794427e0016c1727fd186c2888e7061521aad5cf55db35a82a79bcf7e71ff20c8115b2","ssdeep":"768:G6FMgu73lbiB83lzKMjI5nrkmgDtJZc29bOedJaGqeDS:tFMHlWBKF8nrkmsnc8bRdJHqx","tlshash":"88f2e13d1bd03edcf4963935cf650da8ef37b62a0923598d06c1fb544897018b79ca4a","first_seen":"2024-08-20T10:14:07.556949Z","last_seen":"2026-08-08T02:48:31.042602Z","times_seen":284,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/media/supportMessage.370f1e53.mp3","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /media/supportMessage.370f1e53.mp3 HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:50 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 35944\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\netag: \"69b6fb0c-8c68\"\r\ncontent-range: bytes 0-35943/35944\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFvaceJXheIgpJyPZFdn8o3L3LLKzgRGKjBv%2F4UtwZQBfj%2B0VeTrhT%2FcLZMJMhxN7hmSvCIncKYC8dUgqY3uXvGhYne8ymDifrM83bXrK3QtgvyuXIM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd29393e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35944,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"370f1e53da0177284513bf9131740e5c","sha1":"1f602ab2e5c786b0308c98a855292b6967188281","sha256":"472d5def8a2148e70fc25c1f8c110ac77b728191b2f052eef171c131783f7865","sha512":"fdd51341219ae23a8d0b2220323a80428d34781cae0a0a60ee89681904beec1ffff67d90371391f6d8079bed10fd2491af422d3263a116dc83a8a54a102a0458","ssdeep":"768:LU1Y/cdNAFhpiGRDIwOLfqBMY1vsQvOMksoX/jcGc/rc6jVXebj2Bj4a5y:edyFhsG5OjtY16h/QGsrc6N0aBjpy","tlshash":"4ef2d087654c0eb8f496835545bf02a5eeaa7c1c473175ccc13afbb21373f628b9a056","first_seen":"2025-06-26T08:32:10.105296Z","last_seen":"2026-07-27T04:52:14.035008Z","times_seen":239,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/brands/hrblnvestments/logo-white.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:50.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/brands/hrblnvestments/logo-white.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 28532\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69bdce03-6f74\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xdel8eFIxDhSMUZClt0OrB0ZfSQ9YliKWEhmJxeiiWnIXHJ6hV4ppMdnU3Txul81sFun%2BfHn6X69KHymvWLcZPfJMLvKZRCd\"}]}\r\ncf-ray: 9df9fd30fbda5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1829 x 400, 8-bit/color RGBA, non-interlaced","md5":"240b7fa9017cb79a2180340e049d41e8","sha1":"ded8777b6c4f22c3edd86c22630592dd10d6c5c7","sha256":"67ea4ffd09623e499b6cf9b9424d8e76834240f72f4bf5232735c41802fe6ddf","sha512":"61d71bc2b4413e7cbea3f7323d0fde4320ca5ffb716b24ac16497ff04f51773505f6c03882fca5b99ef310b81e9d8f0fc6fd60f92426a40128610b368460909b","ssdeep":"768:9LMkluifAJE26ZD7B5vfjSxNXnek7yC/Fe+19ir7:9Lv8+d26xX7Sx4k7yCcr7","tlshash":"cad2d0a50057aaf0e5892ef08f6d87ea23950655c3aa421d367bf236bdcf38f13111e5","first_seen":"2026-03-11T04:53:35.055747Z","last_seen":"2026-03-21T03:58:46.729718Z","times_seen":6,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":38,"dns":22,"connect":1,"send":0,"wait":131,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/image/new-design/certificates/master-card.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/image/new-design/certificates/master-card.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeyAPjUQIKKZGOOxhWJG8SWkCFKkexTXgNco2CgJr%2FMyQTmWGkSHgULC08V3clKNcn6oOMbVT6DQHheMaigsG%2B%2FXnRqpXq8H\"}]}\r\netag: W/\"69bdce01-302\"\r\ncontent-encoding: br\r\ncf-ray: 9df9fd3339860883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40475ec8ab046210394270740b1f722e","sha1":"7d8c70098de0112f0868c5adab3034193b42ba30","sha256":"584cc334320b5e1756711cc93c394ec0a9b9c4f47f848168237d8506fd3078ca","sha512":"3a696c527234b277b4845432c683690ab10bc06502f3768c0d8e4f81dfdd8b892fad4ee66ee6e17b0af4d15626437c78968ce8e57563688632ba558a32ba9615","ssdeep":"","tlshash":"8401dcdaa288f7c4a462dfa5532ba870593f42f8e680c2c043b8fb4037d230e082c880","first_seen":"2025-06-06T08:43:12.055243Z","last_seen":"2026-07-27T04:52:14.052496Z","times_seen":241,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradays.com/en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1","fqdn":"www.tradays.com","domain":"tradays.com","tld":"com"},"ip":{"addr":"194.164.179.31","port":443,"asn":0,"as":"","country":"Cyprus","country_code":"CY"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tradays.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Mar 2026 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:97:2D:3B:4C:E3:A9:10:4D:49:39:75:21:7A:CF:C3:6A:8D:4D:8C","sha256":"A5:52:66:4F:18:16:E7:2C:AB:14:7D:B5:B1:DA:0F:5D:D0:A7:3C:FC:70:A4:74:97:DD:05:32:DF:FA:58:0A:E0"}}},"request":{"raw":"GET /en/economic-calendar/widget?mode=2\u0026dateFormat=DMY\u0026theme=1 HTTP/1.1\r\nHost: www.tradays.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 21 Mar 2026 03:49:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate, no-transform\r\ncontent-encoding: br\r\nexpires: -1\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-robots-tag: noindex\r\ncontent-security-policy: default-src 'self'; script-src 'self' c.mql5.com www.tradays.com www.metatrader5.com www.metatrader.com metatraderweb.app www.mql5.com https://content.mql5.com search.mql5.com search.mql5.com https://c.paypal.com https://pay.google.com https://cdn.chatbot.com https://widget.mindos.com test-api.sumsub.com api.sumsub.com static.sumsub.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' c.mql5.com www.tradays.com 'unsafe-inline'; img-src 'self' msg1.mql5.com msg2.mql5.com msg3.mql5.com msg4.mql5.com c.mql5.com https://content.mql5.com charts.mql5.com www.mql5.com www.tradays.com www.metatrader5.com www.metatrader.com blob: data: *.tile.openstreetmap.org https://c.paypal.com https://b.stats.paypal.com https://dub.stats.paypal.com https://www.gstatic.com img.youtube.com; media-src 'self' blob: msg1.mql5.com msg2.mql5.com msg3.mql5.com msg4.mql5.com c.mql5.com www.metatrader5.com; font-src c.mql5.com; connect-src 'self' metatraderweb.app www.mql5.com www.metatrader5.com www.metatrader.com https://msg1.mql5.com wss://msg1.mql5.com https://msg2.mql5.com https://msg3.mql5.com https://msg4.mql5.com wss://msg2.mql5.com wss://msg3.mql5.com wss://msg4.mql5.com wss://gwt1.mql5.com wss://gwt2.mql5.com wss://gwt3.mql5.com wss://gwt4.mql5.com wss://gwt5.mql5.com wss://gwt6.mql5.com wss://gwt7.mql5.com wss://gwt8.mql5.com wss://gwt9.mql5.com wss://gwt10.mql5.com wss://gwt11.mql5.com wss://gwt12.mql5.com wss://gwt13.mql5.com wss://gwt14.mql5.com wss://gwt15.mql5.com wss://gwt99.mql5.com https://cdn.chatbot.com; frame-src 'self' c.mql5.com www.tradays.com web.metatrader.app metatraderweb.app player.youku.com www.youtube.com player.vimeo.com vk.com rutube.ru https://c.paypal.com https://pay.google.com https://cdn.chatbot.com https://widget.mindos.com test-api.sumsub.com api.sumsub.com blob: mql5buy: mql4buy:; object-src 'self' c.mql5.com www.metatrader5.com www.youtube.com; worker-src 'self' c.mql5.com www.metatrader5.com www.youtube.com;\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ngenerate-time: 2506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":148056,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48335), with CRLF line terminators","md5":"682c1d35de316d8b79d877bb833cca6a","sha1":"06997448cebb22ff52eede571447a12d05814de7","sha256":"3e84ab151747af289701b5237bbdf42eaf0a41f066822bd91b38e0086ec07197","sha512":"3a92f2c3e02a09caf21005359fb43bc1ee06961f73f3beff969d2b84cc88b90cef0119ba4425cb42061eaa672444c7707d0d44bd6c1778c893965350d9113c80","ssdeep":"3072:7ZkpApBR66HBWJrcsE5Pgvjy84cMUCITjj:7ZkpApK6HBWJrcsYPgry84cMUCIz","tlshash":"b9e38b585ade0237947509b873778241a4e12765bac90c58fcacef5c6fcbcde40c6a8e","first_seen":"2026-03-21T03:50:23.117354Z","last_seen":"2026-03-21T03:58:46.735462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1595,"timings":{"blocked":786,"dns":398,"connect":18,"send":0,"wait":23,"receive":0,"ssl":367},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/image/chart/expire.png","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/image/chart/expire.png HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 430\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\npriority: u=4,i=?0\r\netag: \"69bdce01-1ae\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps%2BqamqsVsjp%2B8CZqftzyWRbAWZsc3G1U502rz%2B5m7HKyrChS156LU5nK29V8kBBJDxPnOgMAy552bRUMMAyaNhUH0lAy3K%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd356d270883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40f70b5c06b9f4e4e3dd6627bfe8625e","sha1":"3ea3b5a1c9bedd85678e765ebc5e9afe21ed4685","sha256":"5d9d19e539736e08b8eeb21ea0de6daf5ccda26169a9d063782a745be12a29c9","sha512":"0c5715aca5586d87a14c08e29f6a13adf0bfecae4278cb929ae9179671015576d83f6fd892e2d60460c3b55e19a1c4b5857ce6ff25bbfdfeaddfefd858f34ce0","ssdeep":"","tlshash":"e2e023c0eb852832c6c87727163f420c69bfec805c049ddb0159c4fa616860110d5681","first_seen":"2025-05-28T00:42:12.46262Z","last_seen":"2026-07-27T04:52:14.03347Z","times_seen":244,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/config.js","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urCR3cADijlBgFZrDbMeO4NrwXXuUjL6yjtcdhD3Smdmgfr%2BolLdH%2BK1Auflhac8uJBt8rvJ4Lx%2FKrM7pBH1dEPRth23pJdcl6HPuboT14WkoSi1ixM%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0a-670\"\r\ncf-ray: 9df9fd1c0873120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1648,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1648), with no line terminators","md5":"22c5f5c04dcd6dcdef6f72602bc93afd","sha1":"f643929f2986f7649ad8e730a4490ce1a8f7cf29","sha256":"474051bdd876031c9d1bbec01c9d44822038f08419e35ccc985a6dfb325d33d9","sha512":"76e7db6f533645b3628afde0571f31a121e2bf4865d5e8ba3d497268819303cd77933ba940b757c716c850b4a59528ba7c0fc901b483c33cec45ea85dc0703fc","ssdeep":"","tlshash":"dc31852b1f2afc3ac302ac8f63b81e33624d729d069b5444a08de619df9b5b1e57314c","first_seen":"2026-03-11T04:53:35.047308Z","last_seen":"2026-03-21T03:58:46.724121Z","times_seen":6,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/media/click.726c6bc2.mp3","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:49.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /media/click.726c6bc2.mp3 HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:50 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 4378\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:40 GMT\r\netag: \"69b6fb0c-111a\"\r\ncontent-range: bytes 0-4377/4378\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nl9LtMrh5JSk%2BKlKtxW5zFnzf4ZYy0%2BDhcYguQQjhYDJJZd41FfC5yIRSKzS774NqUeb%2BryEES0cigi167BLbRoGidPYR47sJXalYIFsHv8z9thwJaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd29393b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4378,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"726c6bc200ca0821503aaf447e3e3b5a","sha1":"a90eea6a68d659cbf657e99d22a128d9aa725d1b","sha256":"4b4045d1723a9332f16feab63038751c3f297fe54bf133cbb3891ea5028cb9e2","sha512":"6dab4620f6347e2dd0ca8d242742665bb7a16c68652abca521cd982d78ba2aae101a05ba4c4c357d7f92b0def66d5758c59e43057bbd639606177d265b5b605a","ssdeep":"48:cKo3kkK3arjMcACvxnSj+CacRVz+SsGiPsL3kHMlDANLIjs7/QpR59CmxvoXd5bf:CkkK3arjvAC5oakVoG+uUN0s7/+Tx4f","tlshash":"85917d578d49b271c04de83d943126044b06fc82c89686ee151ff364c9bcb06bd2561c","first_seen":"2024-08-20T10:14:07.554483Z","last_seen":"2026-08-08T02:48:31.113785Z","times_seen":283,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cap.investlt-dhrbr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 599528\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-14T19:44:23.003265Z","times_seen":262187,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/css/chunk-vendors.c5a8cada.css","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /css/chunk-vendors.c5a8cada.css HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FkCw2V%2FLZcg7ykJmCOGkULN9ekZ0UjVDsuouqbKRPdt1FWULJqU3sjIVmdx9GEfQM1TT9tUHJVKsoF0YOoUOAqoqJeWX47Q2OgqFRB8XCuwQdv0E%2Bk%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b6fb0a-12cb\"\r\ncf-ray: 9df9fd1c0875120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4811), with no line terminators","md5":"6ca376a8d26c309be793b3b8666ca34d","sha1":"1c45dd55839afd8454a3145e8bdb39d359d6f539","sha256":"bc608cef2cab892421565cc74a90176e5302c7d1cf7751ae5040ba8090f34fdb","sha512":"0431631e8511a1e21662dfc4d09b6bb3225f4143f310721dc8d42d8dd4ea78da4d4c56ec036431eb3e37b8b59047af4a242945a591ac5c2d69ef7208c9e4aa1b","ssdeep":"96:J2tmOictRHNUME7WWXIShv/JRhWWBh+5T+3:J2tdtufhv/J3h+5q","tlshash":"08a1507fb248f1684027ff42a5e15addf42ba3b0b6522a15f2c4623021f27d1bc2893c","first_seen":"2025-03-06T08:07:18.685166Z","last_seen":"2026-07-27T04:52:14.025106Z","times_seen":247,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/brands/undefined/pwa-icon-16x16.png","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:50.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /brands/undefined/pwa-icon-16x16.png HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:50 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AoRXGmIm4qe1YrE3NIyd1yIxBLkhP%2BCuaIKbhWldyc29wXcWKA82rVFnISL6V8zkugKrrQ85JhkXDW1NKBQy2F02%2FOhDj2mhVvDRST4MaZAXWvtQBk%3D\"}]}\r\ncf-ray: 9df9fd2cc97a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4867,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1611)","md5":"908f8d98d3c551d4a1abc5a641be3f9c","sha1":"be6af1f9557a78313541c71c251ca6df5c98024f","sha256":"ec37e3f6056f7ef1475d659a50ef5ad85f26d35b6a8a608be7c61eeeb4a746fa","sha512":"2ba76eef804e125ac6762e83b6a60875e2582c7e710e95ec8a39752d7e60bac3f30f715d197fd2fe2f88e90420e865932834992331b6d2dee7b94e47a4e003ee","ssdeep":"96:GLOUIL2ORxb2pnHPB6hP2GW2WLabn8qw8nbq/sqnVLYxDDnSQ4888VvM:GLt22Ob2pHJ6hP2GW2WLabn8qw8nbq/1","tlshash":"b1a1a8a35412408d2e22aaa5afb8722ac0df951f9561ec44b4bc02ddcff07d04ae3723","first_seen":"2026-03-16T05:32:35.93237Z","last_seen":"2026-03-21T03:58:46.697405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cap.investlt-dhrbr.com/bg-dark-tablet.png","fqdn":"cap.investlt-dhrbr.com","domain":"investlt-dhrbr.com","tld":"com"},"ip":{"addr":"104.21.39.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investlt-dhrbr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 05:49:42 GMT","end":"Wed, 10 Jun 2026 06:48:12 GMT"},"fingerprint":{"sha1":"49:38:41:F0:72:D8:E5:C0:5E:F1:C3:AF:8B:54:78:6B:AD:A7:9D:E4","sha256":"84:7F:FF:A0:51:F4:55:EA:85:C5:58:AD:10:78:AA:47:0D:2D:55:35:80:20:8D:A6:9E:B4:07:57:A1:30:23:64"}}},"request":{"raw":"GET /bg-dark-tablet.png HTTP/1.1\r\nHost: cap.investlt-dhrbr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 603478\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Mar 2026 18:31:38 GMT\r\netag: \"69b6fb0a-93556\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtskJwPTTeboa8LK5d9Ioy1MlkQPl5O4xSF1lge63XsJryaWUZZg%2BhDUwcCtSPImk1L3YkIuPrDtSxkByXSbyaSwK5xgeA2JcgF4EJQ58gwfs6rxglg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df9fd33ba23120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 928, 8-bit/color RGBA, non-interlaced","md5":"76c0d4811a33873eadd863f79d98b0eb","sha1":"e83495ece2948b67e13ccefea431e7762e16f7b0","sha256":"24ab23af0a72fd64b4aeb0d8925923dc6d0b4e58524a11d7b7a3dbc3b9f2830c","sha512":"bd25f631c2bb7a30b842054e331b45261f4dc8bb8739a42764e44bf9be5f6fa3d725f518aad73488bd911e3d9c303dfe391c705f399d7800805e5552d7933da2","ssdeep":"6144:H/ChmhXjPP1KCV8o6rrCrm0Rwh+5qfn5VbBlSKGt+aiu5UUgHQudVdwAtySCkEHQ:fssJjdm0RwhEqfndDi+6SxvgtsDwc","tlshash":"3fd423339539d03fc3e651b03a3b988bfe1f7ba8475dfc22a46590a411e7e5a2748907","first_seen":"2026-03-11T04:52:27.219675Z","last_seen":"2026-07-27T04:52:14.041294Z","times_seen":196,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"cap.investlt-dhrbr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cap.investlt-dhrbr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 599528\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-14T19:44:23.003265Z","times_seen":262187,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:49:47 GMT\r\ndate: Sat, 21 Mar 2026 03:49:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-08-14T18:56:04.205083Z","times_seen":61635,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":90,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p-cdn.in/hrblnvestments/image/new-design/certificates/stripe.svg","fqdn":"p-cdn.in","domain":"p-cdn.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cap.investlt-dhrbr.com/","date":"2026-03-21T03:49:51.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p-cdn.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 18:42:35 GMT","end":"Sat, 06 Jun 2026 19:40:15 GMT"},"fingerprint":{"sha1":"6A:F0:D3:CF:C1:83:A4:6F:00:3C:D1:FF:C1:54:DD:E1:04:44:5E:76","sha256":"58:1C:D0:B1:F8:6A:EF:8A:75:F1:9E:D1:0C:E8:B7:0D:0B:3E:86:A3:D8:DD:09:CD:05:BD:F8:80:0F:EE:F3:04"}}},"request":{"raw":"GET /hrblnvestments/image/new-design/certificates/stripe.svg HTTP/1.1\r\nHost: p-cdn.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cap.investlt-dhrbr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 03:49:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:45:21 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6wMUaAXY4SqWasPLH7BZb%2FEEGaSwO9wlKpXHqPwZsAg0DYMxllHxhay5aOJ7%2FyonSEc8XMub0jjl%2B1wpq5jFqwzjcCpVOC%2B\"}]}\r\netag: W/\"69bdce01-916\"\r\ncontent-encoding: br\r\ncf-ray: 9df9fd33398b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814cec58da90aa00323310dcdbb29a69","sha1":"03c274d644deb4361f3d7d1fa036c4cbcbc23061","sha256":"3132ed55a70668a7854743d1a6d7c3966b483d546524c62257632577376e6248","sha512":"a47e0c09184b363fa98723c375ff9f52751112614c387506ede39ff28eb2ce35b608719b8f453f73d9c828bd85fc50d36c29fd98ab2d059fa6216b3cefd44cc7","ssdeep":"","tlshash":"094134d113f0d6f56606ab5dc4a26822b7a834b77a44d79bc3e4afc0a1180c40a85d5e","first_seen":"2025-06-06T08:43:12.060368Z","last_seen":"2026-07-27T04:52:14.087136Z","times_seen":240,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}