r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7834
Expires: Mon, 28 Nov 2022 06:58:20 GMT
Date: Mon, 28 Nov 2022 04:47:46 GMT
Connection: keep-alive
www.transcapital.org/
301 Moved Permanently 707 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: www.transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Mon, 28 Nov 2022 04:47:46 GMT
server: LiteSpeed
location: https://www.transcapital.org/
x-turbo-charged-by: LiteSpeed
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1551
Cache-Control: max-age=108558
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:46 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 10:57:04 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6533
Expires: Mon, 28 Nov 2022 06:36:39 GMT
Date: Mon, 28 Nov 2022 04:47:46 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 04:19:31 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1695
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: diCT63/63iwElMRqMneQk/aXb7dEkCzkBOJoLXWsxVVF7jmya8FYW58KfuHD2bWoqpGvFo+jlzw=
x-amz-request-id: AFY4X887DBV1HRZ0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 04:44:54 GMT
age: 172
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 04:47:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 1fe2d5acebe7f09b5dc26b9a09632bb2
729aaf4ebac2302720de82d89e6202fea713a743
738a135d2130f5898a3b062bc2c10970d9ef731dea3e4755a36026e58e66ebc3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 04:47:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 21:41:43 GMT
Expires: Fri, 02 Dec 2022 21:41:42 GMT
Etag: "729aaf4ebac2302720de82d89e6202fea713a743"
Cache-Control: max-age=405834,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771077b09a3ab50b-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 04:11:12 GMT
cache-control: public,max-age=3600
age: 2195
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1258
Cache-Control: max-age=103203
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:47 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:27:50 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1uz9AWzG5Oq0Od7IPI8Erw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HoWxlB8sJueve0fCiZsz5eWlnLU=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11924
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 04:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11924
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 04:47:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11924
Expires: Mon, 28 Nov 2022 08:06:33 GMT
Date: Mon, 28 Nov 2022 04:47:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 515b38218003c32df1ae80c1028ca88c
1b129f9794cbee796ec6321c52d062a58e3c26ab
acc804008b482ba917a113be5361f5172b973db477947b3da749d3287774980f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7444
x-amzn-requestid: 71662fef-ed42-4596-ae11-80d8fc05f7fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGNloAMFjZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-4fd8cdaa43d66ba20286e4ed;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OzmdUPtDp11ymTQ4BfzdNELHeUhpm96MiMjAdCPY2xgFoNoLVLvDww==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:40 GMT
etag: "1b129f9794cbee796ec6321c52d062a58e3c26ab"
content-type: image/jpeg
age: 24669
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 577b69fd08ad8368ea5a94fe41476c1c
9442f111d329f721ddc55100cd246586d8204048
bdafc5068032dcf5e207cf2685a1b9350dbe8d990ba181520ff47889524532f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8517
x-amzn-requestid: 12456791-0e7f-45d7-97ae-d663c8fa841d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvHHLoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-54ed1ec101789247052c9ec8;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nultDXAkaHp6QxGLyEw4fwxN7pWlANJhy8lalSyZuJesPboNe9pFWg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 07:12:40 GMT
age: 77709
etag: "9442f111d329f721ddc55100cd246586d8204048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d407d1a700a02f6422a0415be9648354
e9a69711e04e8028f11082285a405bafc61c5b20
dfc27a9aea46df1e218ee485296392c5a6c03756e91487f37212c69d4b30a418
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 24915481-2902-4776-b489-7741957424f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvEfioAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-7846a98a5fb3d0786cb84130;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -DsRBfO-yxwm29z7mDDNkK69aQb_fpEzVY0vuVUWZrx6-aubx7a3YA==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 07:39:44 GMT
age: 76085
etag: "e9a69711e04e8028f11082285a405bafc61c5b20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 7bac5d73-8d3e-4118-8e22-4887e5bcff1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGCxIG4iIAMFiuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f1807-79abc1566b56f55a77e99fba;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:06:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wjCHWlSR8xahgPhTM-aq6UY_isn1Rzk14sAEPjacga8FXJ-Kcnn_rg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 08:10:48 GMT
age: 74221
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 24393
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff33742-bcf4-48a8-b6fb-80eca56e49e2.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff33742-bcf4-48a8-b6fb-80eca56e49e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 71251bd4e19aa0d2be6336e7366f15ff
5c8be4aa5190dc7ae89674a26945bfc9ff240175
fb15afbdd12ab04b3bb2785fb3ebf1f2d82f243b47f1b8c2c8788f7653f8059b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff33742-bcf4-48a8-b6fb-80eca56e49e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6003
x-amzn-requestid: 55485f7d-70d3-4f00-90fa-6384e53c990a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR79tEt8oAMF8vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9f1-7b8a266209a1648724c5ca9d;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3edUH9nvxAHeFtJk-vye1QpLXAgSYPo62odg3mPQwE-u-npXeDDdVg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:02:13 GMT
age: 24336
etag: "5c8be4aa5190dc7ae89674a26945bfc9ff240175"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.transcapital.org/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: www.transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.2.34
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://transcapital.org/
content-length: 0
date: Mon, 28 Nov 2022 04:47:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5468
Cache-Control: max-age=99879
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:32:33 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
transcapital.org/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=6.1.1
200 OK 237 B URL HTTP/2 transcapital.org/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=6.1.1
IP
Hash 83042c9c72bc38390b52906120f81c35
98a9789c05c0f981dca01d2c3622b5e458ba7589
a193b2efbe3e706cc8c633fff822f5a64eb0ee5f692c4a3495f3c7e58e8b7637
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 237
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 transcapital.org/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash c4d7cc056b49b00e05cc29cc59aa3d5a
48c426bec60099d2a8628df430ed682c72aab42a
8009c12f2674a8d38401f4b5faad1fef2cfcd18a8c927ed2561ae9d7de9b57b5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 15 Nov 2022 20:39:37 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11616
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/2 transcapital.org/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 08:32:08 GMT
accept-ranges: bytes
content-length: 217
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.2
200 OK 1.8 kB URL HTTP/2 transcapital.org/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.2
IP
File type ASCII text, with very long lines (1146), with CRLF line terminators
Hash 7fd5b66fe02c604dd2a951acbbb498eb
72b591429d4b1f4cbcd07e0202b38289b064d406
99752198ab19f31a810adb6b219c3dacfabf0fbac073f57caa1568bf6e41c02a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1800
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2620cb440711056d80ec6ee6a4101116
0de0450475dd899906c36956881f9db5ecad90fd
9a84a21b1cb5e13c925b144beef55b87669a02836087e1a9cf74fa4964ef43f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5468
Cache-Control: max-age=99879
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Etag: "63830b45-117"
Expires: Tue, 29 Nov 2022 08:32:33 GMT
Last-Modified: Sun, 27 Nov 2022 07:01:25 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 27 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
Hash d523aa8a20c8367fcc3618e25d97bd2c
230a192b50b9f376cbfcf2f0e65fa088d8569596
d54eade05b028aa479c509dae8d6a8d3f4bc7cd652c54005cf240b99c7858552
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 28 Nov 2022 04:47:54 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+394; expires=Wed, 27-Nov-2024 04:47:54 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 04:47:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
transcapital.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2
200 OK 848 B URL HTTP/2 transcapital.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2
IP
Hash c962ba8e7d42ff9da18392b41dad5151
7b89bc5e6ad161df2e6d7f7fb3ad894aa04b827f
322a4949c5bdd82eb80c13bbbd407ce30a7ad226685c54270d246cb6960e524e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:26:53 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 848
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.5.7.1
200 OK 3.3 kB URL HTTP/2 transcapital.org/wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.5.7.1
IP
File type ASCII text, with very long lines (18488)
Hash 74605f0ba33a07c6f5e5045465985a50
26f17e30afd3be054e929bab62a2eb0bc0ead3a1
80d32f698646117890863e03c7e3302afdafcd73196f8d470a50788890caf45a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wp-ulike/assets/css/wp-ulike.min.css?ver=4.5.7.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:28:05 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3332
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1
200 OK 96 B URL HTTP/2 transcapital.org/wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1
IP
File type ASCII text, with CRLF, CR line terminators
Hash 6510ecad4ef6a328cabe2d4aa884c797
84caa6684e78b6dec70787f6764e1908f82c6966
4e0034001f2578d4a60ec43d8bbbef16c4f6b4b4275cf8b0ff62e4b76d48e24b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Sat, 22 May 2021 06:54:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 96
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0
200 OK 3.6 kB URL HTTP/2 transcapital.org/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0
IP
File type ASCII text, with very long lines (18854)
Hash 23d0cda7fbd7f269a200dfff8ee211c6
497cc19819270e7a3795ab61e775c130ac7b255a
299d22db4a8362551089748bb93645f190469be3b392fa206b9872bd298bb41b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.13.0 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3554
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.7
200 OK 445 B URL HTTP/2 transcapital.org/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.7
IP
File type ASCII text, with very long lines (3815)
Hash fac216a255af7e3e3ed972430e43281d
cd79e95868c76caaf93414e07b6e80bb6b29f6ea
5d5ab658b0f99a7e34231c75da2186e635981c6d3eb5de4643b2ce4fa67d6c58
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css?ver=3.4.7 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 445
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.7
200 OK 16 kB URL HTTP/2 transcapital.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.7
IP
File type ASCII text, with very long lines (65497)
Hash 526771b639cac3143e3d53928c87df6b
d3055be91c90d94dff63bb3319224f73ea69f01d
e35df5b042e9ca42b10d0b1a539dfc6b11c19a058e0ef80156d8f28fd024e0b1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.4.7 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16495
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/elementor/css/post-66.css?ver=1636111666
200 OK 361 B URL HTTP/2 transcapital.org/wp-content/uploads/elementor/css/post-66.css?ver=1636111666
IP
File type ASCII text, with very long lines (1145), with no line terminators
Hash c439893957059e5e4f976b2f34ec3ea2
69d45596054a396d6b9c1b5da14cbb4ac8c79c28
2bc1a24166b95cf7d33b75abbd4d6cfe5dea367cf95c061e43558d7f458e1ef4
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-66.css?ver=1636111666 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 361
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.5.6
200 OK 196 B URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.5.6
IP
Hash 206eb8858ec85f7affc110d6e57973b7
06ed15976b88f3fbca53b998a339f895e1a9ad30
417619673bb0519b2eda92c4b0d4a8cd1db42d1171953ca77ab6bd1cc8ef64a7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/other/elementor.css?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 196
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1
200 OK 109 B URL HTTP/2 transcapital.org/wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1
IP
Hash bcac653a4c98073fc9711917f8157709
a16d6ce7ccff8341a5d9a09104d8dba7de2da3ea
4e4b781cd42516c03313048515e766fa293f65afaba289ea95662aaa8d1b0c46
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-elements/admin/assets/css/elementor-widgets.css?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:33 GMT
accept-ranges: bytes
content-length: 109
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
200 OK 2.4 kB URL HTTP/2 transcapital.org/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP
File type ASCII text, with very long lines (11256), with no line terminators
Hash ce94f62588d05264ac0148712111cb11
518bcd922f54169aeb199c0ccbc5877165ac218e
84ab658a69c39f424be0b27f61d612447d01606fce33beb962cbea53627d8c81
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Wed, 30 Sep 2020 01:23:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2394
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
200 OK 982 B URL HTTP/2 transcapital.org/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (4186), with no line terminators
Hash 24f4d7f425e792ab35adaab50816e54a
9e25bf79b674ddb7ba09ad7f118c50ec473c02c8
1c78bfb4d523785a4ebd37bb1f79f214f9bdb16673f7cc50805f7f1a26ad7f83
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Sat, 08 Jun 2019 06:15:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 982
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10
200 OK 22 kB URL HTTP/2 transcapital.org/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10
IP
File type ASCII text, with very long lines (65492)
Hash cf17765339c358f662f0b485e05b3d8b
f93370f6df67fceba23de2857f5cf37cb7369cf6
0708320b9ca5aebdff083bbc76f5742a64e3b3299a2c61337afeff80b9e6e8b4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.0.10 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 08:34:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21617
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/elementor/css/post-65.css?ver=1636111667
200 OK 6.6 kB URL HTTP/2 transcapital.org/wp-content/uploads/elementor/css/post-65.css?ver=1636111667
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cd77efefd5bb08cc751af9af69b672c8
c47fc7381af510672d2506ed9569cdb3328e6ae0
962f7c866e240e1a3797966d77b20ad3e5e0b63ac9804f9c217e25d5295fa6fc
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-65.css?ver=1636111667 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:52 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6574
date: Mon, 28 Nov 2022 04:47:52 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.5.6
200 OK 7.9 kB URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.5.6
IP
File type ASCII text, with very long lines (308)
Hash dd8ebe5854da033da3b6183de1b74f74
f7cc27bce488eba0f757ce1df2bff8eabd81a109
531436672f48e0941e09277d098e4c6c679964759b68d6b45f76cc6934f6e8b9
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/auxin-icon.css?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7929
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/phlox-pro/custom.css?ver=1.5
200 OK 1.7 kB URL HTTP/2 transcapital.org/wp-content/uploads/phlox-pro/custom.css?ver=1.5
IP
Hash 77fa5357c19ed1481fc09a9395490f08
d8c44ea1fe37003872ca1f98ebf6ed1e5f9e62a2
bc75e67b00ee28e9e3e479f80034f8114208a8586c2be99fe015173dbab21293
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/phlox-pro/custom.css?ver=1.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:18:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1676
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/go-pricing.css?ver=5.5.6
200 OK 1.5 kB URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/go-pricing.css?ver=5.5.6
IP
Hash e28a500d25e16de65b0fe72768312f05
8d30cb620c8d0f4aece2c1806118e40e1b6453fa
94a3532c2c4a75a76eb022ad346a95cd3512a295d3925a91c4a50294961f1660
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/go-pricing.css?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1458
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/portfolio.css?ver=2.2.2
200 OK 2.9 kB URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/portfolio.css?ver=2.2.2
IP
File type assembler source, ASCII text, with very long lines (851)
Hash a4f5d85040c6b62fbe88e20e21dccbd1
c70ee8c41d20e144e8b7f1094aeb958e05d48568
e8a15037b3522764ca41ec3a264957dc170b84f322f0647287d5d6d4fee66a73
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/portfolio.css?ver=2.2.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2931
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/elementor/css/post-61.css?ver=1636111668
200 OK 971 B URL HTTP/2 transcapital.org/wp-content/uploads/elementor/css/post-61.css?ver=1636111668
IP
File type ASCII text, with very long lines (4104)
Hash 22c89370aa4d2487694a592ac0a4d916
7bcd2b43045f175298e3cf13f77787c69e916dcd
005997ea5a53432b1ffd70df9cc0f4f7d4d13bdd7768b65db0461e69d241e3b8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-61.css?ver=1636111668 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:52 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 971
date: Mon, 28 Nov 2022 04:47:52 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/elementor/css/post-60.css?ver=1636111668
200 OK 1.8 kB URL HTTP/2 transcapital.org/wp-content/uploads/elementor/css/post-60.css?ver=1636111668
IP
File type ASCII text, with very long lines (12870)
Hash 27e54c5857cfa868eef6ec1dc629b607
6d6014ecdf201e2ce1bd12580d282bac8532c98a
59071ce514beb06ebc54b99f6d0711f0e0dfe83c0b81293499d42d8993ebcb39
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/elementor/css/post-60.css?ver=1636111668 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1812
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.0.7
200 OK 459 B URL HTTP/2 transcapital.org/wp-content/plugins/cf7-conditional-fields/style.css?ver=2.0.7
IP
Hash c1f190ef94dec24af292a9afc2af9be5
1bb1f45127a72bbfdaae0ce0b73c1b276e1453e7
cefd1bd07d728b76e133c9a3dc17ed9fd02cb89b0c4d2fa1c59549f6fdbd6fd4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/cf7-conditional-fields/style.css?ver=2.0.7 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:26:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 459
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.2.5
200 OK 5.0 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 090d56ca1e6016ae6aee2b71b0788bfd
c6d574b79fa48ce3430f17d62a125022919998da
7b763cb5cb16fd9d5f0b2dc2e9e4a7c1bd672a99207ceb4e57e9aeeeb937460b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-fonticons-ii.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5029
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fonticons-fa.css?ver=2.2.5
200 OK 4.4 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fonticons-fa.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 203c79ef105517f21436e6c5f7866081
d4a48b9fc97464db54948ad59466931ae2c9aaad
ba5355df2bab7fb5e09da06d449faff5e9badf0be16b1abf762cd28636087e4e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-fonticons-fa.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4419
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=4.0.13
200 OK 1.8 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=4.0.13
IP
File type ASCII text, with very long lines (14965)
Hash 326fd660ce91fe3e6526ed90a886d1cf
ea78b5521a718d3cb371a49bbb763cca1a965dd1
66faaad2896c1cbcea2b0a86276a98dcad883ab67e13032e769607f5b5d4bcf5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/select2/select2.min.css?ver=4.0.13 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1800
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.2.5
200 OK 852 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 3aadde2f376f8fb74594a047c1a60b18
d5a2c55f28b82995bb21b77c6fa1f62683ae6e83
74af900a90d551b3f5224f2c12f339cc206dea551503cf9a465535d06de9dca3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-crop.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 852
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.2.5
200 OK 830 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 517e9cc44d07574418a28e2dbcc473be
c510b5bd27e5a93ce59f882c23c0d980fe143a1a
ac46e08f17effd7f5a8c9733997bad1c4679ad7d162b1edcbfde80803552c18c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-modal.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 830
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.2.5
200 OK 4.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.2.5
IP
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash c8419f1bf05b53973174cc15b93831db
a7b86e72a0910dcdf055d23cdef081f5042cc86c
a17d6e75bc640bf91e615b6d4da9add1b2314b51ded39b8c15d2be1abc0b6173
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-styles.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4053
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.2.5
200 OK 2.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.2.5
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash aad0409caf2c359db4fc1555fe59ff5a
a5efa4f11035b429b6eca51427bb131760693581
180c37b1cc4a56bc75a95a0b45c69ef519fa154c09a0e318ecc18c826131f4a0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-profile.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2054
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.2.5
200 OK 1.0 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 59170963d5c0fc2595c971d273cf559a
72e21d9638be0fd6f8fc283a6e6401053cf0a78e
0b3ec88062ab089f6e8762f99bd50a4cafc68f2eb6cb54d716cf5954ef6b2384
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-account.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1026
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.2.5
200 OK 629 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 1e361523ad4b41d7e46f33ba1a9d9270
cea819034c7fac15c797679659caf43414dec15d
bad108f56182b00a25eccffe5eb7a8ee7d4e3ec87fe8b986d3e5f3ea84609722
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-misc.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 629
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.5.6
200 OK 6.8 kB URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.5.6
IP
File type HTML document, ASCII text, with very long lines (19371), with no line terminators
Hash d1e25beadb48f15a8ae491640a181f8e
5a027d8485aa02d1961c6afdda0c4911671fe707
826df592f57341fd8332976209ef2df6517716b4cf7a2739e7f468875663d3c4
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/js/solo/modernizr-custom.min.js?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:49 GMT
content-type: application/javascript
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 6820
date: Mon, 28 Nov 2022 04:47:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.2.5
200 OK 293 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.2.5
IP
File type ASCII text, with no line terminators
Hash b7aae6be6f2a077506ca65ef312512ea
a54b0fecf54a0c130779440544b789d1b95e9fed
4007f2f1679d321eb40023d03d99d30899145bfd402fc7be5abdd50ad41f4035
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:50 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-length: 293
date: Mon, 28 Nov 2022 04:47:50 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/2021/01/Transcapital-logo-e1611756410461.png
200 OK 11 kB URL HTTP/2 transcapital.org/wp-content/uploads/2021/01/Transcapital-logo-e1611756410461.png
IP
File type PNG image data, 178 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 472830a89acc60b0f30de3ddcaf9e356
8f93fa7787c6df462f8ac9413ef99f9fc31fbb06
4477cf39064c1db3cc97b5bfc2b5b826d235f3a6bc331a0780d4f77c3c2adee2
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2021/01/Transcapital-logo-e1611756410461.png HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: image/png
last-modified: Wed, 27 Jan 2021 14:06:50 GMT
accept-ranges: bytes
content-length: 10582
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.2.5
200 OK 845 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.2.5
IP
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash e6d3e381cb1cad09ca0d9991d7a4d9bc
4b66ac9eefff20b0140378a4d37b4d89a46967d4
71b8a9157a561f3d81480d82ae31abdffb9a69da97e647323b8463ba0208e128
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-fileupload.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 845
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.2.5
200 OK 1.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.2.5
IP
File type troff or preprocessor input, Unicode text, UTF-8 text, with CRLF line terminators
Hash e309ba900abdea5b5fc45223470bd84c
4d38239f1f48f74a6e3ec72419d9664ceea2b0a5
d1e01da55942a1c4123cdf629ddf11486f95f6e4606af6d7b2b01a8c82612cbd
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1076
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.2.5
200 OK 1.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.2.5
IP
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 83f4496e7d110ac4e5466e5f99fce7b5
06b22a073da2fafbb762eeb178aff35c277cc9ec
a71d20a114f5ff570d20fbc240575ee63dd0a81827385eaa4c376119a93df415
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.date.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1146
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.2.5
200 OK 647 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.2.5
IP
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 48b46fc5a9e8c31f80f66bf87ce8ebc8
a392fc2c33390664e9c3dea2630073833f1c1b4c
02aff32edf425ffcfad74edf6a587c15405068914e7e51270da7c51deda5fa2d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/pickadate/default.time.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 647
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.2.5
200 OK 392 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash e1a97213e08ca891317558a436e1da5b
e5caa66afaa2b78243f61c31784e8b554b836784
4570184add307c3a72d939b5916141e7c61b4afbab09adde5f6568837c7557a9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-raty.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 392
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.2.5
200 OK 890 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 8f0c68bda57a989276038a5deabaf8a2
82170e2d3eab88d61ab154f15921cb6bc94f1385
e468f2b5edfce1653504858f4b4310f29ec7dee8ea006cfac79f31cc9e72c65d
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/simplebar.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 890
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.2.5
200 OK 441 B URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 791eca9a148a8f82e13800b1c02d52f4
16a8f131f5d1e440659147eb2c9893fe16180bb3
cf136ed55674379e0133bf59e3ec619d708c62885020a72f6c8e547d9f52b6a7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-tipsy.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 441
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.2.5
200 OK 1.7 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.2.5
IP
File type ASCII text, with CRLF line terminators
Hash 16a2dfd1e000e877e8391ba1d9356bdd
201759f2021b25758ec1af2f0749ecc27cdd6e26
b4a5fe9a1635a9b423bf14991bc76f2e260adc2512b9bfa61c6097c75c8e0672
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-responsive.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1708
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.2.5
200 OK 1.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.2.5
IP
File type CSV text\012- troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 5df94c75874c13cb4479b27130d9bf33
557c1319d7dc501d6faf2050092a371fd6087033
4b2a1611edc81173f5169b05e3da8737c722df2061dae1a393bd90ad639e37ef
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/ultimate-member/assets/css/um-old-default.css?ver=2.2.5 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:51 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1089
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.5 kB URL HTTP/2 transcapital.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash b58921fb05a6cd3dcd6a9e5dc711d101
c147159c1a060cf4d4efb5f9e1fd5622f602c372
a2060d15016d5ea84f62e0404eb7a6e8d22177f5d26a8c2b9130146715986d5e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:48 GMT
content-type: application/javascript
last-modified: Thu, 19 Nov 2020 20:01:14 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4461
date: Mon, 28 Nov 2022 04:47:48 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.6.3
200 OK 444 B URL HTTP/2 transcapital.org/wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.6.3
IP
Hash c7c2e2d8b2284574b9b3381fa04096e8
2513a1b43d92b1a87af758c2858c1bdbdbcdc5f3
49f04eb91470a30b8914a1983881b1ebdc80c87535b0785860dd7ee010f377d8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-pro-tools/admin/assets/js/elementor/widgets.js?ver=1.6.3 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:49 GMT
content-type: application/javascript
last-modified: Tue, 26 Jan 2021 08:35:00 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 444
date: Mon, 28 Nov 2022 04:47:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/base.css?ver=5.5.6
200 OK 18 kB URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/base.css?ver=5.5.6
IP
File type Unicode text, UTF-8 text, with very long lines (448)
Hash 18848776b6e8185db160ae878d61cd01
75fc51bee5fd9940e1f4eb05701c4c3570cfcddf
b51bb06eb57a8c55559322b82fb8865eb6fcab398ec84d4e7bc0ef8b386e8b5a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/base.css?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17632
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 35 kB URL HTTP/2 transcapital.org/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 90306bc85d896abd8d83613f1fd48736
b27aa18d1006f02b05e9b7167b4f993be483f131
75640bc7f516c65f9905c4e6d804cab87371b64e2117a4c92f61eba9dba7c842
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:48 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 08:32:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 34867
date: Mon, 28 Nov 2022 04:47:48 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/2020/09/Ellipse-104.svg
200 OK 262 B URL HTTP/2 transcapital.org/wp-content/uploads/2020/09/Ellipse-104.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (462), with no line terminators
Hash 40010dc6c8061264635d19da6f8ff8cb
b5141169eeba84950942b2c1bb70684ef6603876
70c363b107058501e54b04e59a93c5271a322df15c4b796b66c941aa710e072e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2020/09/Ellipse-104.svg HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Jan 2021 09:10:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 262
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/gtranslate/flags/24/en.png
200 OK 1.8 kB URL HTTP/2 transcapital.org/wp-content/plugins/gtranslate/flags/24/en.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash ec7233b5c80e5db85f7733b2ec25203f
d4c36fff06dc7d920b10eb13b58ea9cd9321b430
347ee97a492f79675749d03533810ff899ee6a784b4e156f3e0a7613cdfb3d40
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/gtranslate/flags/24/en.png HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: image/png
last-modified: Fri, 05 Nov 2021 11:27:20 GMT
accept-ranges: bytes
content-length: 1767
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.7
200 OK 2.4 kB URL HTTP/2 transcapital.org/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.7
IP
File type ASCII text, with very long lines (10019)
Hash d2db71c82a8f672aea59a3e050cd8cd7
af626566f94b3164e4310288cfb142431e8349a6
bcd2c9c2ba22a48a8fabf9fbe5e947deb6404367e4be24f48326e302aead1180
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.4.7 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Fri, 05 Nov 2021 11:27:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2442
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 2.0 kB URL HTTP/2 transcapital.org/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
File type ASCII text, with very long lines (5477)
Hash a470625c53b3b59e23a96c3861e930e8
49695665ae5b983cd2767ed808fafe7831cfefc1
b32b62dfa87e526b3091baa28ee17a1739047227553e5ac9e6b42c8b867621f2
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:50 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 04:23:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1989
date: Mon, 28 Nov 2022 04:47:50 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 8.3 kB URL HTTP/2 transcapital.org/wp-includes/js/masonry.min.js?ver=4.2.2
IP
File type ASCII text, with very long lines (23966)
Hash 8a8aa9e3707855b73220ac7f41951448
f015254f2bf41f4e522743948ecf1dc19c52c5b4
11582264d355876d27b4f0ac5332d5a395c3d1361e3355973ed7c27ad93134fd
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:51 GMT
content-type: application/javascript
last-modified: Sun, 14 Jun 2020 04:23:28 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 8335
date: Mon, 28 Nov 2022 04:47:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.8.9
200 OK 772 B URL HTTP/2 transcapital.org/wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.8.9
IP
Hash c18cbdb80af1d8b1ab8f7d955bdcac57
d7d9ba02b5d878ce15a2829995dad0be98a594d6
514e3cf3551af3119675fcb264c155c809d380494487f5ddba7b93e4acd38e9e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-elements/admin/assets/js/elementor/widgets.js?ver=2.8.9 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:52 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 11:27:33 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 772
date: Mon, 28 Nov 2022 04:47:52 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
200 OK 553 B URL HTTP/2 transcapital.org/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (1191), with no line terminators
Hash e7e88959f0a47fd1f32b2c6e127228df
21bab7089f9c406e2043deb66bbfdc7f20e1ab0e
2ed582648457449d068b5ccb193d1741e2100a04c4ec29dff4ee38a2baa4e359
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:48 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 20:55:41 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 553
date: Mon, 28 Nov 2022 04:47:48 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
200 OK 477 B URL HTTP/2 transcapital.org/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
IP
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash e5044095cec3a560b7a7db0574bc02d5
feac78c61ae0f79e741e1336a7906accd89f4dbe
624ac74641f1ee5ae6fa1a9fc45df254b4e7dd00b77375aa889c2bf0f33d43b8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:49 GMT
content-type: application/javascript
last-modified: Thu, 04 Feb 2021 08:45:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 477
date: Mon, 28 Nov 2022 04:47:49 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.8.9
200 OK 11 kB URL HTTP/2 transcapital.org/wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.8.9
IP
File type ASCII text, with very long lines (31771), with no line terminators
Hash de9f3fb6c34cc7d023bc38022fb31596
49017603ba76bd96798277c30c9db28878daa556
11585ddccf35c9978f48c66016a4dbce283f812ee4c3d3e650997c622fd3a5b5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-elements/public/assets/js/plugins.min.js?ver=2.8.9 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:50 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 11:27:33 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 10550
date: Mon, 28 Nov 2022 04:47:50 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.8.9
200 OK 2.1 kB URL HTTP/2 transcapital.org/wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.8.9
IP
Hash 6d1866d5f8b8df489793535e8a9ce93f
8b9fd2d1f230642247872029a8374e21d9742c83
d90ade9023a20d5f716a8c0b8ab64512f9b2f82592e155b1aed9d74032843a2b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-elements/public/assets/js/scripts.js?ver=2.8.9 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:50 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 11:27:33 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2097
date: Mon, 28 Nov 2022 04:47:50 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/plugins/auxin-portfolio/public/assets/js/portfolio.js?ver=2.2.2
200 OK 793 B URL HTTP/2 transcapital.org/wp-content/plugins/auxin-portfolio/public/assets/js/portfolio.js?ver=2.2.2
IP
Hash c49e407f925f390a2dad33468ea172da
77a06b22fec70dbbee3878cac92eabee7e84e254
528c3d351c2dc90900f0507e5da06fcf8eadfc14ca3cd66a9e685041e22100a0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/auxin-portfolio/public/assets/js/portfolio.js?ver=2.2.2 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:51 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 11:27:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 793
date: Mon, 28 Nov 2022 04:47:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=1.0.7
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=1.0.7
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css?ver=1.0.7 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 04:47:54 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 723, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-07-24 08:09:23
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 4a09b1215c24477e5a7b2418672f0a26
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 388560
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 771077ddaec7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 04:47:54 GMT
date: Mon, 28 Nov 2022 04:47:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Quicksand%3A300%2Cregular%2C500%2C600%2C700%7CRubik%3A300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Quicksand%3A300%2Cregular%2C500%2C600%2C700%7CRubik%3A300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5
IP
GET /css?family=Quicksand%3A300%2Cregular%2C500%2C600%2C700%7CRubik%3A300%2Cregular%2C500%2C600%2C700%2C800%2C900%2C300italic%2Citalic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&ver=1.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 04:47:54 GMT
date: Mon, 28 Nov 2022 04:47:54 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
transcapital.org/wp-content/uploads/2021/01/Asset-2@4x-1.png
200 OK 0 B URL HTTP/2 transcapital.org/wp-content/uploads/2021/01/Asset-2@4x-1.png
IP
GET /wp-content/uploads/2021/01/Asset-2@4x-1.png HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: image/png
last-modified: Tue, 26 Jan 2021 09:23:53 GMT
accept-ranges: bytes
content-length: 129634
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/css/main.css?ver=5.5.6
200 OK 0 B URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/css/main.css?ver=5.5.6
IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/css/main.css?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:54 GMT
content-type: text/css
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 84386
date: Mon, 28 Nov 2022 04:47:54 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.5.6
200 OK 0 B URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.5.6
IP
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/js/plugins.min.js?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:51 GMT
content-type: application/javascript
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 164056
date: Mon, 28 Nov 2022 04:47:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.2.34
content-type: text/html; charset=UTF-8
link: <https://transcapital.org/wp-json/>; rel="https://api.w.org/", <https://transcapital.org/wp-json/wp/v2/pages/65>; rel="alternate"; type="application/json", <https://transcapital.org/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 04:47:53 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.5.6
200 OK 0 B URL HTTP/2 transcapital.org/wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.5.6
IP
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/phlox-pro/js/scripts.min.js?ver=5.5.6 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:51 GMT
content-type: application/javascript
last-modified: Tue, 26 Jan 2021 09:00:32 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 13699
date: Mon, 28 Nov 2022 04:47:51 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
transcapital.org/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
200 OK 0 B URL HTTP/2 transcapital.org/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
IP
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: transcapital.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://transcapital.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 04:47:48 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 08:32:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 45289
date: Mon, 28 Nov 2022 04:47:48 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
198.54.115.119
104.18.10.207
93.184.220.29
23.36.77.32