{"report_id":"2441a63b-e0c3-4092-8c12-8d5cc116df5a","version":6,"status":"done","tags":[],"date":"2026-01-28T19:52:04Z","url":{"schema":"http","addr":"capitalaccessreturns.com","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"title":"capitalaccessreturns.com","dom":{"size":43044,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"33069f8cff0841090d7c75bd57ba335a","sha1":"e6641ab2462a83785d86bc169524316ed20cfcfd","sha256":"bcadf1b01ea1a0a965db40e49a98ea582117d0d73ad817fdabd9f90dd2f733de","sha512":"1a84f0530a8f64026c94b37472bdc1ed0aff7076fd5e2386004b52a22ef36379cd98b3d90e2b36db63f6390d44099bc2a056cdbb7376afb7b2fa526d6bd1f65e","ssdeep":"768:4jr8FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWf:4jr8FYTbfsTO+LDCPKHshqa/XOl6rf","tlshash":"241396176780462c9c5392a8f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"capitalaccessreturns.com","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T19:52:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"capitalaccessreturns.com","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-01-24T12:40:20.966242Z","last_seen":"2026-01-24T12:40:20.966242Z","alert_count":336,"request_count":112,"received_data":5528435,"sent_data":132582,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"Flat UI","description":"","website":"https://designmodo.github.io/Flat-UI/","common_platform_enumeration":"","icon":"Flat UI.png","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-01-28T17:33:30.317833Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.158.107.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-01-28T19:31:47.810806Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.bitcoin.com","ip":{"addr":"104.18.0.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-01-04","domain_rank":855986,"first_seen":"2013-08-06T16:26:26Z","last_seen":"2026-01-24T18:42:43.791076Z","alert_count":0,"request_count":1,"received_data":1120,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"err.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":0,"first_seen":"2014-05-13T12:11:25Z","last_seen":"2026-01-22T17:18:25.121589Z","alert_count":0,"request_count":1,"received_data":143,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widgets.bitcoin.com","ip":{"addr":"54.150.142.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2008-01-04","domain_rank":0,"first_seen":"2016-11-28T05:55:58Z","last_seen":"2026-01-24T18:42:43.819759Z","alert_count":0,"request_count":1,"received_data":195,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-01-26T04:36:08.768233Z","alert_count":0,"request_count":1,"received_data":214014,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-01-21T14:08:53.791088Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-01-21T14:08:54.186117Z","alert_count":0,"request_count":3,"received_data":323866,"sent_data":1401,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-01-25T22:28:03.589555Z","alert_count":0,"request_count":3,"received_data":27323,"sent_data":1632,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.195.1.42","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-01-28T19:36:43.045943Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":613,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":7085,"sent_data":475,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-25T23:48:49.64661Z","times_seen":3253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/jquery-1.9.1.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-24T07:17:38.424291Z","times_seen":71524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/appf700.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a2bdcf407eb3a86eff3e410341d8056","sha1":"7548919fa47ab6655a017a8cc361cfc488e7caf3","sha256":"6dec2ee04e4e2caccbd945ce9be7fd77c969b84f10cc789620ac78b9328edae1","sha512":"f29ed914988d363dc02dfee1fb8f0a53e2115e9c66e345d10e83686b3a9b981d276a2fcefa761719c2064367f644ada1b8a2b56471f63de3fbaae4c152af140c","ssdeep":"384:7IzEivk2M0WlgCy9ZL5uDtHXp/BdCBHGUkbBu:j2MflA9ZL5uDtH5AHKBu","tlshash":"d9926f1e79ba62b2197b307a6befc54035744063508ac940786c97884fa0db4e7f5fee","size":19917,"data":"","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.726878Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"71074e9b62e4989e2a13902f4e09dce8","sha1":"ade202ccbaa06a603c5435861bd03374b953b10f","sha256":"ce626e336e3713b8590c183da50f876bb93231fa8ce21f6a743eedd9710d74b8","sha512":"2e1d49709aadca8db235b9776f1cdd4701e73db6f9ae56d0383a227f323f493c80b5823bd147fc53f34e53b9135a91ba3d1731b56fe982b4a622fb6e41deb74f","ssdeep":"","tlshash":"3a01205f9385501507c19430be662bfb377a317eaf24b931b88d83ba0f6d6a671311a1","size":847,"data":"","first_seen":"2026-01-23T14:03:31.379075Z","last_seen":"2026-01-28T19:52:13.545677Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/_/translate_http/_/js/k=translate_http.tr.en_US.YJ7Kn-ahZ40.O/am=wA/d=1/rs=AN8SPfpckRH57vcLdwnB4mz_gKC8HHWUtw/m=el_conf","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bf3e3ac8e10a0f24ed40e479993c7ae","sha1":"b9d06b1a8ded5f7c795769132916763f6d9b0f45","sha256":"07971b7ce2117baac675603dfbe2e06c6655d4a02f7742d280276799298bc921","sha512":"53b2b52ed8b049502cb054b45fe8fcaa46940aa24e98b04dea2e642963268225fbf32a8081ca1976eae1cf210a5da9379482b76f1b3ea5e6c3fd5a4c2d3986c3","ssdeep":"1536:XOiNmAru5fx8H7SkK4g/DxsOJDgs2ZNrRhEGurLiwwNW19:XCv8b24g/tsqK+LiA9","tlshash":"6d93a688b6a270658263b5b5513f000fb27f599af84c4cacb288d9e16df094d427bf7d","size":90012,"data":"","first_seen":"2026-01-23T14:03:31.349115Z","last_seen":"2026-07-21T09:15:55.7309Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/popper.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"84415b7368fd6fc764cbe86039ce0626","sha1":"62f238e73348c77eb9e865426a7d1b7de23cbb2d","sha256":"c776195ad46333c6c9a9fe3c74502ffea9a02faf122388ea3567922cc65a3060","sha512":"8423f7a626064813ea9d7ca974ac4a3d23b304717be6853cc10f356ba3a21971c531e2acf7ff0285b81897ba54bf02265c96f4dcde1bb35a350f399ba2479e17","ssdeep":"384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti","tlshash":"c8a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2d97c30ef9917fd79","size":21257,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-24T07:22:26.214105Z","times_seen":15544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.magnific-popup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T07:21:48.889573Z","times_seen":71678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/bootstrap.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-24T06:57:30.092838Z","times_seen":96317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1b2da963e3378ea2978a2da10803ba6","sha1":"577e0e28fa2507f7049c8f0040bc1e072d0ec118","sha256":"a22ada0e00e46afa2999eb4a3563aecd30fc966f1d1cfeb82a30d2a9e548c08f","sha512":"4f0f13c09df71a84925106ba89a17b1f9eff308bc44f7057bd49b19b459ff113ec3e921040c7d3d37ccd39db9b6080043acbac099bc5098f00b1b25e2b8a8967","ssdeep":"","tlshash":"e3b0120ded720098171b152af1a17a20d8e98926eaef1208753e4c620e28e3de67d80d","size":117,"data":"","first_seen":"2026-01-23T14:03:31.379892Z","last_seen":"2026-01-28T19:52:13.546445Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/js/flat-ui.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04c4cc1ba34142862f94d6ce6d1cee","sha1":"a2bb6302052863a17312ce3c360d9480e8fa2d00","sha256":"33cc2bfefd536a71d11960fd33288746ac01d29cc05238d4543cb3abc3089d8d","sha512":"186ff5cfa07831525d40ec37e65138a2dadb8ddd96615fb3857823511f834de68073bb3f8a3816b1ec4449c48e228f09e119610b6f0255eac38d84121fcf5e91","ssdeep":"1536:NhImBtoyYN1mtq6tZ3JVAr2MRCqNPbVzDFJmXGe783ZRcz3WkxjT3rCkOZU1MrhF:G1K3JRM9tGp8p6z35/OkOoxI","tlshash":"3124e789b253726256af60b650bf010f7236667ea409882cb479cde96d78d0c317bf3d","size":221872,"data":"","first_seen":"2023-03-08T16:14:06Z","last_seen":"2026-07-21T09:15:55.662464Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/npm/sweetalert2-9_html.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc7dc1619990b10a7c0d3b85080adf3b","sha1":"4e0f5a09772837a65841275d6a2d4d3f5e116d95","sha256":"381481eef21793fcd2d39d875156adc09e495e0f8411a510f9d6453f5bb7963b","sha512":"48d45bcdef541e55b69334029856dd96b5bf48040e33fc9b709a92ba4c4c843ffb8928a8f1ae803967596ecfc3d96ee715a8d72b1462dd3b40b883cd058e586c","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGcMBfwX:LaSBrL4K2NgdkdALdWaRFfsEs9wCO","tlshash":"9763f6857a403123a6ab417968ebe309b6b56542fc330c54f129d0944ffbe8f1573bb9","size":67576,"data":"","first_seen":"2025-10-06T03:51:17.579578Z","last_seen":"2026-07-21T09:15:55.714122Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"4daec6f3505b7dbfc5ffc3a103d2d439","sha1":"fa3e8d285b94de4e58d0d9e7ee3cffa59e433772","sha256":"beca93213c33b36ccb0d224d387df3798d5705bf5da62456a9f250e4cabda40a","sha512":"9f324787e0e5a03195c77986394b8aa517fe7884771cea08cde8e92832f3fc1ed1ebddef4e21328eca315c091317ad244ca4590000c544a6b2d593268072a5fc","ssdeep":"","tlshash":"8311b4ae1483a8225bb3232c3bebd340bdb045432809ec16bc2c01a6ff7093154e6b3c","size":962,"data":"","first_seen":"2026-01-23T14:03:31.380771Z","last_seen":"2026-01-28T19:52:13.54721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/owl.carousel.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-24T07:50:50.326878Z","times_seen":65170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/bootstrap.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bea60c34c5db6797150610dacdc6bce","sha1":"544afefd148715da7dd52d368a414703390ca0e0","sha256":"38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff","sha512":"2394e4bad0290e39d6b97fac98b20f64d870f8b85377c5ab4217422acc421514af845c76926f197c4a4d22117d9ead389ac1e13a413c04c3818f9404d3bca130","ssdeep":"768:WLlcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVla4:WLl4SE0MJS36GPxhAV1","tlshash":"c743a54a7254787206df747a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","size":60174,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-24T07:21:26.943162Z","times_seen":8675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/owl.carousel.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-24T07:50:50.326878Z","times_seen":65170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c16d3064b38c9a3d823a5a7a90b2ad1","sha1":"08b6d934c39fca5a9b7037d38a6d6ff8406e7fc1","sha256":"f5255fed1603c5e4c9b96057a378de947ff856f7635ce0751f55bc71e4032c77","sha512":"d67e291551600a79d05f428bdfce33b54a055b25d5e51b3c35ea8de70fe9b1a76e2dfcce0c1a86cae6bc34a598f114153eadb1c344541b07fc2a2908be8421ee","ssdeep":"","tlshash":"8bd0eb1c3c4bc38d43a485f2c0baf828f187072db018cdcc8089967834463cad90c5f0","size":286,"data":"","first_seen":"2025-11-23T19:41:33.110215Z","last_seen":"2026-04-19T03:59:35.319415Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/widget/4NFdZwE5iJ.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b162178942c7edd6b9ecf2e443b3231","sha1":"5cb41a42cd2cf7e2ade55917738c9c78568ac56b","sha256":"460aff6f1917cdfbeea37bac49b52d8ae1d8dcef4ce004c9a3eb658cd0fb4f3f","sha512":"db57ffd3018d07a987bc344762bfa1bfc814be4d709958300c8dff30287f800cc5872849b7959b041d9de2336d752e20c218b13136888d6917f2ccb72c01b494","ssdeep":"384:boUJJ1QY4mmPY0NrANLH8yMiqwIlEeJMz8P0vIbqWcPWv6:f3y1AK/9DPXWWcPA6","tlshash":"c7822a6e7959b93743b208b9606f6209723545ebd404c920a401e98d7db8edf827fef8","size":17638,"data":"","first_seen":"2024-03-06T08:14:05Z","last_seen":"2026-07-21T09:15:55.722285Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef527a0773871c5cec6826b50b2ebd4b","sha1":"33675b98f7996394bec9d36bd2228c4c33571533","sha256":"e9237b6473d31463df851d5c555c56814add1b28403c24b23c9e2b7883c520cc","sha512":"8833d97b742c6a87d1746df39e93e4711e47d645242d8bf0e4b3aec4d3d37e0d81e17acf87e4a98ca4ffab0f4e3e7aa0b982ebbc51815342035d63fce5c62835","ssdeep":"","tlshash":"83b0128d467477332740e74536de32db406505c3d30487c4c20c8491efdaf6b2034062","size":107,"data":"","first_seen":"2025-11-23T19:41:33.115935Z","last_seen":"2026-04-19T03:59:35.322542Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/functions.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd4c5c0db653dccb2f84615d7371a1d6","sha1":"6df1539127aab62f22f6924b05bf4be9568fd607","sha256":"191a2e4331805d4b933f7eca56dd18134e4f0a444945176dd679cf0bb5d179af","sha512":"f811c9113c315d453bc16c5caf4c0e6b676950d77dbd004d12003c0ee27d89c436f759df64b2f777e5ed8fb4030734c514fb59e3a282f39045e326b61431ff5b","ssdeep":"","tlshash":"1711360d62b710b18c23886e77a76120681431533c9a9a4efcdce3018f9752a9ca97dd","size":1047,"data":"","first_seen":"2025-10-12T02:42:49.805976Z","last_seen":"2026-07-21T09:15:55.66377Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.nice-select.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-24T06:15:58.423431Z","times_seen":10085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/contact-form-script.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cdca0b7154bc499a8fc81d883bdecce","sha1":"8c3c112efcfb3c9634b39bc9aa422c09cb8fe026","sha256":"c48f3b1a5f4a88ef1477d9cd0f15445beef7326d63412b6d84e8ee005cb1bfd7","sha512":"1aa9d593c47fb7a48b86773f2f7f4e7dc023e0d361cbee2d1cee22e61bc36a92253eef15a9db1d5b55c742f1c7546cc414013ee3186ebe9a0619c7166d13692b","ssdeep":"","tlshash":"7041ad08b57626c80b273abda6df5104e67052239509ed113c5cb9c49f9cfa936b23bd","size":2058,"data":"","first_seen":"2023-03-07T21:42:03Z","last_seen":"2026-07-22T22:11:05.583496Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/custom.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fa7886292e4b93ae293d9e8f05504e7","sha1":"316a624b2215029a2b7adcd9afbbb7407a802929","sha256":"c882be09bb6c0a2d351ff0c4d0db4349b7d8e2e5e6e0ef994f5e5fae1d7dafb8","sha512":"5a1965db87bab98573e21b88be94a3c1f42cfb014fc0ad44fa41281e4635d1813db02c2c3ee6be0637018a07b37f13fa51bcf622fc67434e8d4f9d7224dfccf4","ssdeep":"96:uEszzmIDP6QmihMHP31jiKFpWtUUKADP6QmihMvDP6jjMFNPlHQFNPIjHAPpjitv:ls1LMP3LiLMvzWazq/O","tlshash":"d3d12104f6ac12b419bb74ad89fd60c25b2d2003e80e79f6f4ed05685f9876e21b7e53","size":6243,"data":"","first_seen":"2025-10-12T02:42:49.709408Z","last_seen":"2026-07-21T09:15:55.695674Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery-2.2.4.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T07:29:04.907786Z","times_seen":292460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/custom.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"72fd4856abcbc327a928b759de69abe0","sha1":"6f4d7b78c2d9234300ba100c91688a3c647038d4","sha256":"612f96e17343199390a154453c5d1d46f733392c583ddc7f72ede88ba7e09bb0","sha512":"16c21e62964dba21c2026406b2bde09065a776ed58fedd089261b1c3d158fcbd68bbe5fd186f76c4e68c94cb175b7d8a02057f1ce5f09b983d2ebdc40d8b6f1c","ssdeep":"384:ssx0WEx00CVREv9df42blpr2gfoH2Y8dCedSuIuleB:9xaxq/Ev9df42blprk2Y4CedSuIuleB","tlshash":"20920006bde528a280bff23b6f9fb118f132916b9604cdc4394d56841f54a24926efdd","size":20256,"data":"","first_seen":"2025-10-12T02:42:49.755057Z","last_seen":"2026-07-21T09:15:55.71846Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/modernizr.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"1258d3cdc71540b07f3422a31e41f21a","sha1":"a426c47c8eb8910ac2a552b2e51b8791858da693","sha256":"7e26ca2fd58d9878a3754800828a0b4a1af34f747c19c7d48ff1add55b1759c3","sha512":"b08b8e0cb38bbecbdf8e2781789bcaacf81a8307ccdf379248b0f593eb2bcfc951143157f8f6082ef9c7353948b34332a3e1080c24cc7579be6f27dd6115b158","ssdeep":"384:AEeMgHW5MfTcaGd+lhomA581KQoZRY5y6pHh1pz:AJMUhh/AmKr25y6pHl","tlshash":"bb62e9cdb253b11a4397607a61bf460ff23e9899a8184854f059c5acbe74cac473bf1e","size":15250,"data":"","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-07-23T16:53:33.993084Z","times_seen":1064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"9626d1d39b91f57bc726eaa90a0c02c2","sha1":"0de4351e657c20d4fe18872973acaee2611f1330","sha256":"815fb7429d87a62906ed23c3d219cb362d91cfac267ffda3d3098cb2f1a312ee","sha512":"21bc4df38c942fbea1fa1e085b64b8de6569008b2cf8af58c984553ed2b69472d0cceef6d320b9a7a3f1ad8003213f5a53e26d2496d7bd76049557c8f27a4e13","ssdeep":"","tlshash":"993141ee611c910b8be79438692f69c5eb2f231e888904a1875b6c780fcd1a41392b02","size":1659,"data":"","first_seen":"2026-01-23T14:03:31.383565Z","last_seen":"2026-01-28T19:52:13.549234Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"b843d32f40dd158762ed9c61eb143749","sha1":"965c9b127f400bc7e7852b63b2f0729863b7a7ad","sha256":"2dd3e1cad62064332ebbb2fa43f332adb9a4547506be2e3b137fcf73a397739a","sha512":"9e5b850b57e5906bc56680134c045ace13f4330c9571b82fd62720cfd0d6c53a32e51e942f3055fb6df3456ecf19f3554859366379a6ddf2c5b3e013db08c9fb","ssdeep":"","tlshash":"c4b09b4cfeb7915416190061d5f0f914649cd5328596d94c155d5c351444f6c961dd58","size":126,"data":"","first_seen":"2026-01-23T14:03:31.384477Z","last_seen":"2026-01-28T19:52:13.550056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#245","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bc76882395c297cde6d025d1014ac27","sha1":"fbdd748f2afbc0cf7ccb6983099a0702b2c6bce3","sha256":"a5f753884da775a8a065a5199b1ee1179cdcba66fd2d6d81ce7fdaeff8c483b4","sha512":"222f612f02ba9c02a417e89db5e6720793b3f2009ced36cda239d8940b9b8605b55855c6543128764dc4b91568a682ed9ebb255aa4e9550e6e585edf229564ff","ssdeep":"","tlshash":"8721448d7e95e23582b021979c3fb70ae29a2ec5a478a452a088ccd5f910947447db64","size":1163,"data":"","first_seen":"2023-09-12T15:24:33Z","last_seen":"2026-06-30T21:22:48.388251Z","times_seen":479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a8697f064528a37381e3b447e1d1700","sha1":"4696f20aad02e21861896bbd090fd49874c3c668","sha256":"7e744a846ec36b091d796e60584023eb0e6984c3d498df0c391c9bf2d317251f","sha512":"912962421cab6805622c1be7537f931986d37f053426456b95436421d5f51124cd56b8ec25c7f082a99acc98da9307085190f8e2cbbba966f7d2cbebe97dee79","ssdeep":"","tlshash":"e7c02b0cfc778144180500a1d1f0fc1820dcd4228152ea0c255c48261004fac970cc58","size":132,"data":"","first_seen":"2026-01-23T14:03:31.385428Z","last_seen":"2026-01-28T19:52:13.551537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/SplitText.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a55ea1ba25bcb38d84ddc5f334e06f9","sha1":"d4377780b0b64c47ce02cde391a5cb513b1032e2","sha256":"f48b7a8ad4b230a69285938a65bb86cfcc6cec9ea2d5d1da1fdef13f18f4558d","sha512":"f75ed9d3f7600905afb9e129ce6299395709939c4a11f821e7c90be3a9aed93d7b92cd4a645a7ab27cb7b480bea8631875c7bd22bb9e7a44bfd44603c19d297b","ssdeep":"192:jSHEWQ/LZ91X1LTUnNnsvYmVDgnqWB3zwbZLClldw1KD3r4rv:jSk5zZ91XdTisvHqnqMzwbglldw1a3cD","tlshash":"9012e89c62511661c5563fd82aaf2a0375751926ba1d9c38f68c9cfc1928ce830eff7c","size":9162,"data":"","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.701538Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/swiper.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"af0f518da79bad640b297887e8d1bf47","sha1":"7a9ff02387a452b44784baa0ddf487669a9c2c36","sha256":"0084c1a86f05f5d5f9a46fe60c258c11264840fdab40f3edd3593aa10e33014e","sha512":"c319a3ede95de738b0ad3ef18983689083bcd7e55d7d5e5c2a8be99139f3b46daed85e9221514f68cfe0804a553813feefd70e7c88e6e5c9f0716b468838ce81","ssdeep":"1536:p4pN4iK5/lsXrSnTLaK82m9lyu84yjRw5Du644gvpuXvH7WcWUmcPqMj3E8EtObB:jsXr4JHmXk8q4gYfH7WcWUmcPqd70X","tlshash":"86c31849b35071d551e72256539ed601a3b66845b90ac0a831b2d8dbacbce8c03bfffd","size":125644,"data":"","first_seen":"2026-01-23T14:03:31.334674Z","last_seen":"2026-07-21T09:15:55.665194Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/ScrollMagic.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbbeec8591b710859280f82c82106f19","sha1":"89e1b8ceba15675c08b1be797245ad27d3586512","sha256":"67960f2f019178ae9f00986c49100d98edf642fe0099c7c83fb1e5b5736ff89c","sha512":"f683841829edcdcbedd6d5db64c077b53a7fb9a52a6a084b08bb894abaf523ced9c01d181cb980a7f5f47ed2ee9d6054f558b9c393fb84562c4d5d51ce5a9ab4","ssdeep":"384:TFcjRPaOYupbMbWnalyCiMLnLZP3JBY6N:SkR8wqnDvMLnZJBz","tlshash":"9672a3cdb341313257ebb3b8902f220ab3368a49a14f8498e425e4f57c69a5e1937f5c","size":17295,"data":"","first_seen":"2023-08-04T09:07:25Z","last_seen":"2026-07-21T09:15:55.67948Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery.magnific-popup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7501bc9635986cd6e48f19c989276be","sha1":"16ebd9b82ddc45699ed629d2e704ce65e0dacf5f","sha256":"f58028704edd4cead02e8bf05f79d788dbae6ada0278c73ee88e28c2dfb7dde9","sha512":"13bb79acecb61535ed197a59db1bbdf27e0d85257aa6c413b774199cc771cc5ba7b524edda7d91186c0ec4cf910f91aa3ae99fa43cdf0295e5bdfe87b1aed0b7","ssdeep":"384:jPhVIXQ2G2XAQyqVxRQ1giCCMLtA4Tn5h5/96l8aZwHwztLCpz3sp:jPSQt8zn5h5F1qkOLCZsp","tlshash":"28921964f2b2b26383a735b8646f700939729953ed06c855b55e84d86efcec89027f3c","size":21200,"data":"","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-07-24T06:23:18.056875Z","times_seen":1694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"08e11c6523e94c7005fd1525068c28c5","sha1":"a8d4986f42a48d108627b51785f30a51145a4f04","sha256":"079989837f3c6ab1518b4294158ed4fe1e932c45d45247bc2f2ec1b5ec277983","sha512":"5ec1183fcb61ea7c0661388d71fb8376c772830971fadf0c092bc257ff2144696c946ad3fed1adfbaf0c89f6e19798b463b88c777b9d38c8d9739432025d75e0","ssdeep":"","tlshash":"de415199ab77018ba0f22683ad65714a1975f11fc846cc89be4d69a08fc7f14f06cf70","size":2106,"data":"","first_seen":"2025-10-06T03:51:17.713667Z","last_seen":"2026-01-28T19:52:13.552388Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/methods.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"26b57951eb7cecfe9cd8eac88dfd15b5","sha1":"642c61596f409071c7f1313ab368a119fc54197b","sha256":"d12640426be0fda4230300115da7daed1186920b8542966cecb14b62e14dc73b","sha512":"164ccf8b99c89fecc37e15eebe891841bd52ce9e84f22893de75234bcd3182e8a2b400fa2e296e8a11bdea9984fe3adeec4cc7ed565cfd9aa04bf2516cfb7f48","ssdeep":"","tlshash":"82219c09a7d905c9cbba3258076f760f2379c197cc04996178cd85e83feb8260a2d8e4","size":1379,"data":"","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.714966Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/form-validator.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"81df0465f243a2e7b7b06b8ad6015173","sha1":"996eb26bb4bdb44ed5257d048cedaf3ed0a6f90c","sha256":"c31a654938abf168fca328d9663ea83999b87ff36d18b016ea8aace1a9cb2cb1","sha512":"80d479d6816cbebc780d89d37bdff0316f731c18e220042b63014875508b942699567271bdcde224f81ad07c31e7febac8e156249dc1217f5b5fac255679db73","ssdeep":"96:CFMhGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:CFMh+U563CvzugvXdfZUopjkunosfR+W","tlshash":"b3c12449366321921f9234f5419b838b72b97b3cc50a409435ea84f1aaf8fc567f7b39","size":6055,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-24T02:03:02.434398Z","times_seen":1592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/calculator.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"bad3db652edaa7bd62a1ccff896e2e08","sha1":"f129700cb56d7ffbb03d46804277c5658d9cc30f","sha256":"2ada0d802ea8203593af02a599367393b9e83d0c82d89e5046adc434b40aa0d1","sha512":"acfd9cbe837b6dc203375e0e4dc2c32cbb8868e54635f04db2727111fcae3ea9643fb392e6eed5decb05ab1adb1dcdc44d4d455a19d83bf93f2ced762cbf04de","ssdeep":"","tlshash":"f841489f7e8f21d401d48027a53616b0ed3dc1368406ae53fcc3da68f4d51a796a1f8e","size":2131,"data":"","first_seen":"2025-10-12T02:42:49.795481Z","last_seen":"2026-07-21T09:15:55.738249Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2503ae8eb5537e67dd4694e35ad4094","sha1":"d7df832409577b4c3a99fdf71068b3061689b874","sha256":"cf972ea801a858fb37bcfa717a335b527268a27e392a034e4fc7fe25c81d24dc","sha512":"05989f07add5b9f315a84453ac1eb6eba7dc1cf133d0a52a7a6ae71490287a32d5f7ba984ec6287a5633c316fec92a603475b5a569909ac489595a90cf058189","ssdeep":"","tlshash":"49111f29ec421ce4614b01b751fea60234ad5517ac00f829772c9d9c4f289cf2a7bbdc","size":1101,"data":"","first_seen":"2026-01-28T19:52:13.553265Z","last_seen":"2026-01-28T19:52:13.553265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283045,"data":"","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c16d3064b38c9a3d823a5a7a90b2ad1","sha1":"08b6d934c39fca5a9b7037d38a6d6ff8406e7fc1","sha256":"f5255fed1603c5e4c9b96057a378de947ff856f7635ce0751f55bc71e4032c77","sha512":"d67e291551600a79d05f428bdfce33b54a055b25d5e51b3c35ea8de70fe9b1a76e2dfcce0c1a86cae6bc34a598f114153eadb1c344541b07fc2a2908be8421ee","ssdeep":"","tlshash":"8bd0eb1c3c4bc38d43a485f2c0baf828f187072db018cdcc8089967834463cad90c5f0","size":286,"data":"","first_seen":"2025-11-23T19:41:33.110215Z","last_seen":"2026-04-19T03:59:35.319415Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.ajaxchimp.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","size":2381,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-07-24T02:03:02.390674Z","times_seen":5281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.mixitup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"0850ae304b0eb839c556c01fba3b3982","sha1":"2666b6f895685e3c7b3f97e56e3f995b84243f36","sha256":"a7b4cb3db2cf3d417e8e69528fde70b5ed09686cbf54cb06e5dd993dfa452670","sha512":"b283d1fe308ffe8084c6069abac2d8a55bff6b39f19fc62c9e9ec7b87df1986f7f8ad85402c1ef9e27839810a78fbab0ca273c56f790700ec0c97f4bc3b4c25d","ssdeep":"768:PbVEg7ZYHQY4KeCWTNkx/vzGUv8U4n4w/s4:z6N4K7WTNK/vzGQ8U4n4t4","tlshash":"62d2f781335834b1160313f36eff5a0ab43bb1a5a505c864f935c4ea1aab945b273b3b","size":28935,"data":"","first_seen":"2023-03-07T12:11:44Z","last_seen":"2026-07-24T05:37:50.674835Z","times_seen":1199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c5120cc4933b0b26391f9ec82e7edcf","sha1":"4d4a38e35b522e96a810ccdc5a0818eee03272b8","sha256":"3ac6d0b346fb790ec92cfa1468adc23d088b415f9b3c1ead0ce706e78588ee95","sha512":"8bce71b038ab04bd2f0543721026e65cb27733148de5c655c1924b6e3b704c229ac9958db235083047884a33fce399c4133ab095634636ffc022fda25c382944","ssdeep":"","tlshash":"99b0128d5d34b7336750e7457ade72df806514c29304c7c4c20c80d2ebdae0b3134052","size":107,"data":"","first_seen":"2026-01-28T19:52:13.567827Z","last_seen":"2026-01-28T19:52:13.567827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.YJ7Kn-ahZ40.O/d=1/exm=el_conf/ed=1/rs=AN8SPfr_YM9qeBxeMaLFUIz_54D0Il6zXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20fadbda7c6267f7f1e86e4814b85001","sha1":"4a9d2b065a91a61d4d1114c59e1be77a519ad6e8","sha256":"6e9637d88d9f99aaed1bda9658285ec2e69da1bb98f07c78e3d5a27d7358a496","sha512":"f5cb6946ecc37d84429709260535364f600cee5bdcc968eeb24e9867217fdbb8e276527900664d44a9cc78fb9b086bec7c82d303a091d35abfa682f3aa843be3","ssdeep":"3072:HeAIrFGMd+HxaxpApqC2pJ3UXImlZuvNNbpgaY3O0xN5gqa:H7MkcpJOleY+KNc","tlshash":"a324e9d9b2527166d263f4a6513f004bb23b6859f8484dacb28cd8e2adf491d017bf7c","size":213165,"data":"","first_seen":"2024-03-14T02:43:52Z","last_seen":"2026-07-21T09:15:55.754007Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery.fake-notification.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"6612749f0e9fde1c01fdc0b53896e5c3","sha1":"bdb5b2b60d6e7cf8993c4cb775839a4b5d342eca","sha256":"f662c40f3cdfd498a0a9782d4a6c31401e835bce0681b1015a4120f18b074ac0","sha512":"0b9a6f07ba7a3181ef70678d3975086d8bd399db12ceb7e9b626d450dcd12365b383a76ecb0309b6f179806e5314e02218d8ac54d56050506913a86de1263bd2","ssdeep":"96:SOncg0Fz+85G9G7abWF1siyTz+2OwFyXYWY7:SOv1daF1si8zJOwrWY7","tlshash":"7991109f6111105a53b3e23ed6afa488df72020f89420659381de06e5ff577c6396ee8","size":4441,"data":"","first_seen":"2025-10-12T02:42:49.711914Z","last_seen":"2026-07-21T09:15:55.723496Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/CustomEase.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"2febc5658a238c06e788ada0251bc165","sha1":"320ef6659bb37fa743973f857a2edeb6ec13cb86","sha256":"f92fb419251392ba608202751b99df9a7292ba1e2c55fc44da0351eb6e5aa799","sha512":"90efb0995fe1f50e95a2244db03e9f6c425262e9a0ca9f5e1509d51ce8e335f71a355cb084fd9b78fab3a2cfc90669ab1ce240e3d60e97203a64ae0c0f1e92e7","ssdeep":"96:jfBV37hsRtEyrioTm2/8iNTkOwR2mB1iNafe/R5FiqREL/GSYFRN809cQbJfdLwD:jSRtv/T/yxBe7ReuRFcEJVLwD","tlshash":"80b108a9503470a5958a2edc081f2c979b77986ab70c3b3ffb6448d91c20be435dbf25","size":5227,"data":"","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.737182Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"16d5dcaa78648af72e1dc416b5478ca5","sha1":"d78280c7f8e38421465aa516cfa5358dbbc65513","sha256":"95697135abaeb98bac9a597c8f7050838207e3011ff5114d08fc2d421b703cba","sha512":"5489f4cadafb9fc639e847c7504ab476ad03aa245d649d93cdccf9cc05651323cb60f91bb1c3a3240aa26d5c2053f47a6f8dcd1fdd43f62ee3fbeefd8828ce35","ssdeep":"","tlshash":"50e0f17c3c3441955bb240b480b7e23c3d0630704851da1384aac8295cf0fce7d415d4","size":418,"data":"","first_seen":"2026-01-28T19:52:13.568679Z","last_seen":"2026-01-28T19:52:13.568679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/gsap/1.17.0/TweenMax.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4514e6131e1758432e33301e4bf1a4","sha1":"5688a393d466bde24928dba3d54eccdfb023cc7f","sha256":"1a324ffab8426503c882cf1903c87537fb3fd0ba84482d24798a795e3927b6ee","sha512":"8f3ef620445cf27cde8ec598bd45a8a022341a5a5ab2fcb7d2feea216d24740ccec359b4da3309c99a77bfaa1b249cdaeeaf08add60ab2ceeb028675ba7237da","ssdeep":"1536:j8NGGVFRbwfv8nhUMJgP/x5PCfCogP7bJEdUNqCPK+5E144D:jVGVPbwfiOv/x90Cty/B+ODD","tlshash":"27a3f8ca72117011459721d6557f0a43b33799a9b40e8a2cf259c5cf3e2caca22fbf76","size":104797,"data":"","first_seen":"2023-03-07T01:18:41Z","last_seen":"2026-07-22T05:19:12.545083Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"2fa09ff771ba6d063da94e4478e83f3c","sha1":"9402a7856e22f2f1bbdc0c1480d769034b34ac0f","sha256":"ca153037a8b2e705b010dcfe615c69483f053f200abf97237dff98af0ccc2ce1","sha512":"eca2122cd8b4d35e899958ebdbfa04e08d9a232a3d08697054b630e6f3d630073140a828542819aa044897277e59e1d466333163e727ea2e3f1e2b980342b2c8","ssdeep":"","tlshash":"8eb0120dec71008804191516e1913810c4c4490592ee0104143048220c24e3c626d409","size":88,"data":"","first_seen":"2025-10-12T02:42:49.899746Z","last_seen":"2026-01-28T19:52:13.573858Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fbcac50dd0072fe5d77eea85dfb55072","sha1":"4e3f4ca1f3ef650f1e357c5b2863552d5335de9a","sha256":"162597f880f26fe052611fb520377988203836294f9fe6ac774884b24ca407ed","sha512":"bfe683e209c7d3e8b19981b2f649b8ed8adc7fbdb46069a130160576a2799a2387cf73dd230fdd9e1892764a0c254a156eff2c5645f607cbc8dd3888e25eedef","ssdeep":"","tlshash":"b4b0124d3c0dd6414190c9e0e1b3fc3c900070383182ccdcc0ca08bcb0846c8ce11240","size":105,"data":"","first_seen":"2023-03-07T01:26:31Z","last_seen":"2026-06-02T08:10:51.759711Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3b1b34eab7fa2aee7af0f75c064c5c32","sha1":"021c8cc1cd51b4f3fca17f433dd29c4adce0473a","sha256":"064071f9946ad3a63bedd0205584ec3d37d72177742438f69b58607fc6bf06cd","sha512":"67aa64e7238f6bd603fd18fdb0729f1a441aeff4c53c901ef20c11a9d929c8e1eec2fb5b38085da8c7703666979cfd0dace3a206337f534ecd682abb69910f75","ssdeep":"","tlshash":"5ab0124dfefbc08405050095e1f0f8246448992343e6cd5c19a86c351804bbcea19d5c","size":103,"data":"","first_seen":"2025-10-12T02:42:49.909378Z","last_seen":"2026-01-28T19:52:13.578235Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"66931d76b45a1bf876e2d19eeee28396","sha1":"940d11a53b542f67290102ea2c1451eafc69c7cf","sha256":"57979e9c73acbc55bae411f1d0072189ef18a1b967faa4d9ccc9dc0e4ecb3678","sha512":"a51fe96bb2c3373ab012d817091aa96abaeeca35e84effb53e90c8c78e39272dbbbbe3521ea0c7e94b2d652ca14ac5ad54d7433d9f972381be12e89fbb6c189e","ssdeep":"","tlshash":"47b0140d7c77c0440c0111d5d1f0fc14104455134355dd5c3554541754047fcd755c5c","size":109,"data":"","first_seen":"2025-10-12T02:42:49.911579Z","last_seen":"2026-01-28T19:52:13.579067Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/skins/orange.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:48.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/skins/orange.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/style.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:24:26 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fcbaa677786e666552624e2966b00f73","sha1":"7550f1f9a5ce0130ecdd0b8f9fc6c39561a87d9e","sha256":"d16ec1e07098d847fb71a5b8c25ba8a7112346510ae7a37634bb67b372f0e8ff","sha512":"5cdfc9db2ef914d3b34dc6bf0e973ff61210e7e252c40cdcf665bedc61c1e46537a61528c0c9185c0e37b1ba7442ddf07597c44c26228d8c581e0c38838aeb52","ssdeep":"3072:xxc2f3xFJDjSgiztry6yNQ6uShiwt99f8guJdQLne:xxc2fhFJDjSgiztrPerCwtfuJdQLne","tlshash":"e60474e5ae760644351bd8a83a85ef61772c5002c84fcdbcb6e9b05cefc97984463f89","first_seen":"2026-01-23T14:03:31.355556Z","last_seen":"2026-07-21T09:15:55.693471Z","times_seen":4,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/testimonial1.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/testimonial1.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 25758\r\nlast-modified: Sat, 16 Mar 2024 13:25:26 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 117, 8-bit/color RGBA, non-interlaced","md5":"260feb58f59b3a2314bc05808ba94fd3","sha1":"7e43b777dbc29af7a0c1ae3a2293856a9b92af07","sha256":"c0e04a4d838563234d3dec77f5da201b8a9bc5669fd0c7975c639a6226be954c","sha512":"89a29920dac84f436f9f4eb3d2c7777d918cc07315467af7f7f508037d52ae45c99b8bef586ffacc539c97a4de7ae2540b0aae9ecd74f92e1182f4bb283eab6f","ssdeep":"384:Ap7/D7rSmVaEfL//mv/8FDK/bNZl3uqo13aZ1/14gh+hLTKxjvGp:0D7e+xDXmbZuqoe/14gQhvKRvGp","tlshash":"2bc2e1915703060f1fa178cfb6ee7254a95b8498ec257c9162ded1eb25d93f0094f8b8","first_seen":"2025-10-12T02:42:49.825979Z","last_seen":"2026-07-21T09:15:55.673935Z","times_seen":6,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/ScrollMagic.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/plugins/ScrollMagic.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:58 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17192)","md5":"bbbeec8591b710859280f82c82106f19","sha1":"89e1b8ceba15675c08b1be797245ad27d3586512","sha256":"67960f2f019178ae9f00986c49100d98edf642fe0099c7c83fb1e5b5736ff89c","sha512":"f683841829edcdcbedd6d5db64c077b53a7fb9a52a6a084b08bb894abaf523ced9c01d181cb980a7f5f47ed2ee9d6054f558b9c393fb84562c4d5d51ce5a9ab4","ssdeep":"384:TFcjRPaOYupbMbWnalyCiMLnLZP3JBY6N:SkR8wqnDvMLnZJBz","tlshash":"9672a3cdb341313257ebb3b8902f220ab3368a49a14f8498e425e4f57c69a5e1937f5c","first_seen":"2023-08-04T09:07:25Z","last_seen":"2026-07-21T09:15:55.67948Z","times_seen":13,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/contact-form-script.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/contact-form-script.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:08 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8cdca0b7154bc499a8fc81d883bdecce","sha1":"8c3c112efcfb3c9634b39bc9aa422c09cb8fe026","sha256":"c48f3b1a5f4a88ef1477d9cd0f15445beef7326d63412b6d84e8ee005cb1bfd7","sha512":"1aa9d593c47fb7a48b86773f2f7f4e7dc023e0d361cbee2d1cee22e61bc36a92253eef15a9db1d5b55c742f1c7546cc414013ee3186ebe9a0619c7166d13692b","ssdeep":"","tlshash":"7041ad08b57626c80b273abda6df5104e67052239509ed113c5cb9c49f9cfa936b23bd","first_seen":"2023-03-07T21:42:03Z","last_seen":"2026-07-22T22:11:05.583496Z","times_seen":163,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:52.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capitalaccessreturns.com/\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH3RAIAAAwBuUwKEwH3BQAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: fdb54123a5d29f5dd8687a6937c4aa10\r\nx-77-cache: HIT\r\nx-77-age: 580\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":63,"dns":36,"connect":7,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/skins/blue.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/skins/blue.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":3770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/about.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/about.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 27862\r\nlast-modified: Sat, 16 Mar 2024 13:23:46 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":27862,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 759x404, components 3","md5":"3ad1cc85f988e8ac409c0db7ddcc87cc","sha1":"eafac2ec6a7cff1e2c76d25ba36b2f612c44f983","sha256":"f162b3503264eb7e6468afe0e630bf0dc594dcf334413dd4e8583d908522f4b8","sha512":"fb0a639d4553763d3282921d919e6914134ac866274e89339dd946f37b80ccceea9e1d8b769e1b1533ce06f91560210d5dfb1517510381e2f7831a7e5310bfa0","ssdeep":"768:WuxCTLNcHCf9gIyiKJKRBika3JvYmvSORzsbgq8ug7298SMOPZ:WusTTaIyxJvt1Jsbgq8u8o8lOPZ","tlshash":"94c2f1c4b1809b01c828e07712a4735bf316fc62079f765cebfaad98799b7154c82cb9","first_seen":"2026-01-23T14:03:31.321735Z","last_seen":"2026-07-21T09:15:55.685938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.ajaxchimp.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:06 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":2381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2381), with no line terminators","md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-07-24T02:03:02.390674Z","times_seen":5281,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/s3.tradingview.com/external-embedding/embed-widget-tickers.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-tickers.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":5086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/fonts/lato/lato-bold.woff","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /ajax/libs/flat-ui/2.3.0/fonts/lato/lato-bold.woff HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/css/flat-ui.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36664\r\nlast-modified: Sat, 16 Mar 2024 13:24:32 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36664,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36664, version 1.0","md5":"796a7724727a6bffefce3b5655f06b09","sha1":"c0904889a226f2e6ff7a4444c8c31529ec4b29af","sha256":"b9e92a504f212c722ed9569379ae5ba70f7867aae94d712c99cd08dc66e233a7","sha512":"82e8f6880c5b8849568bded88f2d48dfb2af0b16d49db8c288ef193793504af76cf7112b73be4c8ee720df690071ea92457384a7ef646f05aeec45715ead7fa1","ssdeep":"768:Nc7OPlBvMYV/0sIcUJHli+REFvogc5kVVKjczZ:Nc7wNL0mUJF1EJPVVcYzZ","tlshash":"3bf2f1a95ce2fd5ba527157c64e1875bfb6033ef4a2592a341bfb0f486c1588308bca4","first_seen":"2023-04-10T18:41:17Z","last_seen":"2026-07-21T09:15:55.706189Z","times_seen":1112,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:51 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Wed, 28 Jan 2026 19:55:40 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3CgAAAAwBuUwKCQH3AQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb541230ac40229d7687a698246fc02\r\nx-77-cache: HIT\r\nx-77-age: 10\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":67,"dns":36,"connect":7,"send":0,"wait":8,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/bootstrap.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/bootstrap.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":3176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/select2.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/select2.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":2481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor5.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor5.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114551\r\nlast-modified: Sat, 16 Mar 2024 13:25:14 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x355, components 3","md5":"475fc25a35301e904a6fc379ca4b626e","sha1":"d70621eeac180050acf49036764a882e32e913bc","sha256":"bb00c6bfbbdef49d6156c98c0a1ef80d6c99a2923166d830d48d73fc8993844e","sha512":"c089f129abae84fb2cd2bd5b57bdf14f9c95df66b5a6147d60950d5e6cc8e6023329d59fef52c06d1d3db23ddf8ee40def27759bdba48935f56041d6711f6291","ssdeep":"3072:IQd5TAP1Gt6nY+7vljCLrJINiYwyD0bALfq1pOAP7r:IQUPy6Y+Dx+dINiPRbALS1Vr","tlshash":"10b3129ee779a75d2f1da860217c09bda80f7d99b444b2b43f8187b2de334522534ec4","first_seen":"2025-10-12T02:42:49.692718Z","last_seen":"2026-07-21T09:15:55.70897Z","times_seen":11,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/bootstrap.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:00 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60174,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59893)","md5":"6bea60c34c5db6797150610dacdc6bce","sha1":"544afefd148715da7dd52d368a414703390ca0e0","sha256":"38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff","sha512":"2394e4bad0290e39d6b97fac98b20f64d870f8b85377c5ab4217422acc421514af845c76926f197c4a4d22117d9ead389ac1e13a413c04c3818f9404d3bca130","ssdeep":"768:WLlcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVla4:WLl4SE0MJS36GPxhAV1","tlshash":"c743a54a7254787206df747a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-24T07:21:26.943162Z","times_seen":8675,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/c7852e2250c3e8c070bb89abe65c194d2005add8.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.158.107.33","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/c7852e2250c3e8c070bb89abe65c194d2005add8.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":229,"dns":12,"connect":20,"send":0,"wait":23,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:52.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-DPeQuegu.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:52 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-451a5\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3tmgMAAwBuUwKEwH3DwAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb54123a6c5fe52d8687a692c429006\r\nx-77-cache: HIT\r\nx-77-age: 813238\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/banner-shape2.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/banner-shape2.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 5359\r\nlast-modified: Sat, 16 Mar 2024 13:25:02 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 905 x 905, 2-bit colormap, non-interlaced","md5":"467fb968907163524e9faaebf44433b0","sha1":"ffc88d7bee499b7577158cd7db4e67a7ef76d378","sha256":"99768bd3e63bf0006f80a8091c2b55c70cc838c89b4b10887a6d9a452cd3c7fb","sha512":"c3c0f4110e162d56cb73701a47116a4466a60e369e38e53a4ab5348eeff3488ef9605990809d3a9ef4536d74e3457ae4e27a2e857568936926ec4fb5b54a91e3","ssdeep":"96:23AN7U2Ijt9u/YsdNJ+i7d/hk+FyhF+fkhGB7zr6f8jglWsrfBiZiEF9zzy79:4SpoO/vdj+iHlyWfrXgRgVZE9","tlshash":"22b17ddd31b44b8c3031f474a30d74e464c4719b661e9a321b0d8eaa875badaf4f97d0","first_seen":"2025-10-12T02:42:49.799469Z","last_seen":"2026-07-21T09:15:55.675762Z","times_seen":11,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/functions.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/functions.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:52 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cd4c5c0db653dccb2f84615d7371a1d6","sha1":"6df1539127aab62f22f6924b05bf4be9568fd607","sha256":"191a2e4331805d4b933f7eca56dd18134e4f0a444945176dd679cf0bb5d179af","sha512":"f811c9113c315d453bc16c5caf4c0e6b676950d77dbd004d12003c0ee27d89c436f759df64b2f777e5ed8fb4030734c514fb59e3a282f39045e326b61431ff5b","ssdeep":"","tlshash":"1711360d62b710b18c23886e77a76120681431533c9a9a4efcdce3018f9752a9ca97dd","first_seen":"2025-10-12T02:42:49.805976Z","last_seen":"2026-07-21T09:15:55.66377Z","times_seen":6,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/select2.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/select2.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 12:30:44 GMT\r\nexpires: Thu, 28 Jan 2027 12:30:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 26467\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-24T08:01:09.621157Z","times_seen":69851,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/responsive.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:24:26 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75743,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4142f73adac7e772e8d1a4c5f7a6eb87","sha1":"f9ff7ba21fb0c38e8f76a2aa1cbbf3c5b0719266","sha256":"0e8a8ec02208ba309b0831fce90495ea250be228cec54a46b851b943c9a773ed","sha512":"6af27c68253c2cb377eba5ad65445b63a2849f5e4422d8a217209f53178f322c57a218ff5f3a2676450513c8fc3a15a58034a316941a41523885c9a16a6ce858","ssdeep":"1536:xUDZRmn/68D7TZ2iC26ZEaqHDkZRmP/68Dg3ZPiScdQnEasE8XjS:xUDZRqTZ2iCpZcHDkZR33ZPiS3nCp+","tlshash":"1073904f7da211593965b9b8bee9be6363859403c5cecce63dc460adcf886f8488174c","first_seen":"2026-01-23T14:03:31.325545Z","last_seen":"2026-07-21T09:15:55.711947Z","times_seen":4,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/logo-two.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/logo-two.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 6651\r\nlast-modified: Sat, 16 Mar 2024 13:25:30 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 120, 8-bit colormap, non-interlaced","md5":"31170bd8f84db5a19cd708da8ba28113","sha1":"ae3905c4597bba78a3e42e2e3fe22ec1d9a6ba6d","sha256":"ed6f3b12bbefcbe3842e68b00cbf6638b95768adf32bb67ee3806bd363052691","sha512":"43e0e0c8d6a75a061f46dc8f9546c2eef046ff395bb8ad60fe949edce15caa214636a51426c7da17048abbbc85fe2a14172c07164c806b4862976fb0eef3c34d","ssdeep":"192:QX/fT80ZVWFvc7cNicy1xBUYPNmC+/UMQ+cud4:QA0ZUvcoty1x6Cv+zO","tlshash":"30d1aeb6f4efa6358632d94d458507e1c3c28dcc7178c9a4811682d4ba7ab1b73c4b6b","first_seen":"2026-01-23T14:03:31.337937Z","last_seen":"2026-07-21T09:15:55.676959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/methods.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/methods.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:58 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"26b57951eb7cecfe9cd8eac88dfd15b5","sha1":"642c61596f409071c7f1313ab368a119fc54197b","sha256":"d12640426be0fda4230300115da7daed1186920b8542966cecb14b62e14dc73b","sha512":"164ccf8b99c89fecc37e15eebe891841bd52ce9e84f22893de75234bcd3182e8a2b400fa2e296e8a11bdea9984fe3adeec4cc7ed565cfd9aa04bf2516cfb7f48","ssdeep":"","tlshash":"82219c09a7d905c9cbba3258076f760f2379c197cc04996178cd85e83feb8260a2d8e4","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.714966Z","times_seen":8,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery-2.2.4.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:12 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T07:29:04.907786Z","times_seen":292460,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitcoin.com/","fqdn":"www.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"104.18.0.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:53.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bitcoin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 04:15:38 GMT","end":"Fri, 20 Mar 2026 05:15:35 GMT"},"fingerprint":{"sha1":"73:B2:93:D8:57:A5:6C:BC:74:AA:87:01:59:17:10:85:5F:5B:AB:B8","sha256":"AC:84:E2:FD:6E:1F:6E:3A:EA:2D:F1:4D:2D:89:44:1E:D1:5D:9F:88:15:02:E5:F4:95:02:83:29:90:82:CB:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capitalaccessreturns.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nx-amz-meta-mtime: 1769597029.636912202\r\nlast-modified: Wed, 28 Jan 2026 10:44:29 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Ux0DrHGlzSf4qkF-vMSQ9WCjwQRiPM-iyCwt2v3j6nW6rFEV8AcBoA==\r\ncf-cache-status: HIT\r\nage: 416\r\nset-cookie: __cf_bm=B_qQzDB20_YIzs0hULq83do6e9OgBOGh2Udc_wBXGD0-1769629913-1.0.1.1-BFB9cs9Pn_1rkSgKePT6H17sf3MOTD.VtKIl_A0ANbTf7Bc7jJjC7n.SU71z_y2IuVtsKQbZW5SQ0WAvYRCHy3Ix.jFt0ZFDPHe1EKIDkNE; path=/; expires=Wed, 28-Jan-26 20:21:53 GMT; domain=.www.bitcoin.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-security-policy: frame-ancestors 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9c5306edf97b120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":64,"dns":41,"connect":1,"send":0,"wait":31,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/translate_a/element.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /translate_a/element.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:44 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":90012,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2064)","md5":"7bf3e3ac8e10a0f24ed40e479993c7ae","sha1":"b9d06b1a8ded5f7c795769132916763f6d9b0f45","sha256":"07971b7ce2117baac675603dfbe2e06c6655d4a02f7742d280276799298bc921","sha512":"53b2b52ed8b049502cb054b45fe8fcaa46940aa24e98b04dea2e642963268225fbf32a8081ca1976eae1cf210a5da9379482b76f1b3ea5e6c3fd5a4c2d3986c3","ssdeep":"1536:XOiNmAru5fx8H7SkK4g/DxsOJDgs2ZNrRhEGurLiwwNW19:XCv8b24g/tsqK+LiA9","tlshash":"6d93a688b6a270658263b5b5513f000fb27f599af84c4cacb288d9e16df094d427bf7d","first_seen":"2026-01-23T14:03:31.349115Z","last_seen":"2026-07-21T09:15:55.7309Z","times_seen":4,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/banner-shape1.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/banner-shape1.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 5697\r\nlast-modified: Sat, 16 Mar 2024 13:25:02 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 839 x 905, 2-bit colormap, non-interlaced","md5":"85749aca09139b8b0e8d3fcfc74c1f90","sha1":"841e969621d754fa179c46f9f521c0da7f4841d6","sha256":"3014c738b43be1caf16a0b1a22f22a86cb964b44c448a02c12ff7fe7624e3570","sha512":"4de436c86206beb25c5d51be66451d8fd39a49ac5713423aec4ca6c059b54c4209c8b3130864821d19e00c945f32e8b97b43556de80a95b3208f7ddd28303cde","ssdeep":"96:3LBRxtn1vEmOywWNut89/qxz1Cq4swDl4KQIbY2sYNqo90nASNoPYy5:im0BpUqlUiGbY4krnkPYy5","tlshash":"79c1af8429a41903cc87adc1aee30e9bde30bf0acb5c91d48c094a186788fc469e597b","first_seen":"2025-10-12T02:42:49.780348Z","last_seen":"2026-07-21T09:15:55.690169Z","times_seen":11,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/tet.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/tet.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 79476\r\nlast-modified: Sat, 16 Mar 2024 13:25:22 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 534, 8-bit/color RGBA, non-interlaced","md5":"efac79997e15f7b4d4946959d8e8f90f","sha1":"04ee66c0ab312c4a3e7474a8418520aa784bec7a","sha256":"f0d232d12806f5f18c3e08b03e2792d0824e7020ba608f6bf03c69453cc9bb42","sha512":"856333c59f2d44d35ff64c73f1f071eceaec7338402078f2a7d5e90322d01ab1adc53a75a8ddde29720625395a736ed168c16775da645be7ebeb9470849f54da","ssdeep":"1536:NVI/VOb4g1E6DRbO6tevTCNoeqqjlql2y+3Zse46fqXgM9m9Yi+:bI9ODE6DRy6O+GezM23Z54mqQgYV+","tlshash":"0773f1297da1f4e9c0088abe59b995c3d4625fb3c8906ce9bfcd0d0a9f157405d8a1cf","first_seen":"2026-01-23T14:03:31.336005Z","last_seen":"2026-07-21T09:15:55.666939Z","times_seen":12,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/widget/4NFdZwE5iJ.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /widget/4NFdZwE5iJ.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:36 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17638,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17638), with no line terminators","md5":"8b162178942c7edd6b9ecf2e443b3231","sha1":"5cb41a42cd2cf7e2ade55917738c9c78568ac56b","sha256":"460aff6f1917cdfbeea37bac49b52d8ae1d8dcef4ce004c9a3eb658cd0fb4f3f","sha512":"db57ffd3018d07a987bc344762bfa1bfc814be4d709958300c8dff30287f800cc5872849b7959b041d9de2336d752e20c218b13136888d6917f2ccb72c01b494","ssdeep":"384:boUJJ1QY4mmPY0NrANLH8yMiqwIlEeJMz8P0vIbqWcPWv6:f3y1AK/9DPXWWcPA6","tlshash":"c7822a6e7959b93743b208b9606f6209723545ebd404c920a401e98d7db8edf827fef8","first_seen":"2024-03-06T08:14:05Z","last_seen":"2026-07-21T09:15:55.722285Z","times_seen":23,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/animate.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/animate.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:00 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":16952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16755)","md5":"7da1b41592f039eecd65d604482c10e1","sha1":"e966ec2885d74306b80253ef057ea77546b2c149","sha256":"0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1","sha512":"d7e98c416ba684d035ed581279aa30fc4de291d8c15686336bca6f4df677c2ae3a50de16ca56a3b8a26f2f07f20f8ef3c063385d49772f70835707372aabee4f","ssdeep":"192:Byq6Vn0u6SBWTRNS3DW5WfW4vLYz3i6PSz/hQQHL:BV6VHTgH4vLYz3i6PSbhTr","tlshash":"46725d4c4a50105941a60773dac89fac863dcbdb68722cef3396588f4b457ee23ea617","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-07-24T02:47:28.745332Z","times_seen":2825,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor4.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor4.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 120368\r\nlast-modified: Sat, 16 Mar 2024 13:25:14 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120368,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x355, components 3","md5":"8342e2c1c54771a501ea09199eaad3b9","sha1":"7e2d0a6fda85e50afc6f6d6acf84a4cfdec6a69e","sha256":"64be8e40aeea5d0a895ebd924f9df011de39a19e2e197f6202c6368ff5ca1fff","sha512":"b684689e852aca889863ca90c3df7643ab259e614d02c5cfac5f49f144ecf652ad9f8ef466267b82859303a2b203a4d9fdb73479a597a47d000b12ccdcfe53fb","ssdeep":"3072:GqiQm7DeIiTDBGv2qJZwoLdawPoZKPmlkF/1d7fQEDEiVp:vSebDBuFZwyawP64ykFzQEDb","tlshash":"5ec312c15ec7f05e50a72ee6dc110abb9c26917e016b31a0addd1cee6acf7b60825097","first_seen":"2025-10-12T02:42:49.744994Z","last_seen":"2026-07-21T09:15:55.691197Z","times_seen":11,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/bit.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/bit.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 78135\r\nlast-modified: Sat, 16 Mar 2024 13:25:18 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":78135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 534, 8-bit/color RGBA, non-interlaced","md5":"570f00070aa8798baac02f8a747bb495","sha1":"ad0c9b842347f1253e0c7924bca5cf3bc45025df","sha256":"af93601b9a97be4fd2f7216afcf1dea51d714755ecbda134a0789b2bd060066d","sha512":"afde3bc24057213db48891c5edda07eed2b2cecb28a911f257e923cdae91db1993cfa34c82f572851c8d3ba858ff3f4c3ffed0d07e7bae8e6e55fae6bf6f88ff","ssdeep":"1536:by4xCMaDwQ85+GFvrHQwyOdTOdE1U5AG9rWh1CANgKVi4rTtYFu:nxC+l5bTHzyWgeoTrWCACKVi4rTeFu","tlshash":"6a73f129ba76f209c849953f0cfc2671daa902f795615ed8b7ce05072f407989c2c5ab","first_seen":"2026-01-23T14:03:31.342122Z","last_seen":"2026-07-21T09:15:55.731757Z","times_seen":12,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/appf700.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/appf700.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:58 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19917,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6a2bdcf407eb3a86eff3e410341d8056","sha1":"7548919fa47ab6655a017a8cc361cfc488e7caf3","sha256":"6dec2ee04e4e2caccbd945ce9be7fd77c969b84f10cc789620ac78b9328edae1","sha512":"f29ed914988d363dc02dfee1fb8f0a53e2115e9c66e345d10e83686b3a9b981d276a2fcefa761719c2064367f644ada1b8a2b56471f63de3fbaae4c152af140c","ssdeep":"384:7IzEivk2M0WlgCy9ZL5uDtHXp/BdCBHGUkbBu:j2MflA9ZL5uDtH5AHKBu","tlshash":"d9926f1e79ba62b2197b307a6befc54035744063508ac940786c97884fa0db4e7f5fee","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.726878Z","times_seen":6,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/logo.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 6651\r\nlast-modified: Sat, 16 Mar 2024 13:25:00 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 120, 8-bit colormap, non-interlaced","md5":"31170bd8f84db5a19cd708da8ba28113","sha1":"ae3905c4597bba78a3e42e2e3fe22ec1d9a6ba6d","sha256":"ed6f3b12bbefcbe3842e68b00cbf6638b95768adf32bb67ee3806bd363052691","sha512":"43e0e0c8d6a75a061f46dc8f9546c2eef046ff395bb8ad60fe949edce15caa214636a51426c7da17048abbbc85fe2a14172c07164c806b4862976fb0eef3c34d","ssdeep":"192:QX/fT80ZVWFvc7cNicy1xBUYPNmC+/UMQ+cud4:QA0ZUvcoty1x6Cv+zO","tlshash":"30d1aeb6f4efa6358632d94d458507e1c3c28dcc7178c9a4811682d4ba7ab1b73c4b6b","first_seen":"2026-01-23T14:03:31.337937Z","last_seen":"2026-07-21T09:15:55.676959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/bootstrap.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:18 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"4194e3d5b8edc3762276cf06aaeabf70","sha1":"ba6470c8e46a0c68482bc9b96015db1cacce3372","sha256":"ac0bc6a838650ea002c6bfb322e4d177b44909ead811d745f224a7c4b8989821","sha512":"c471e2f5d20d745f956feead9bc7565a86e6b258ac2e6691c1bc3dfd6717850c073691f38ffd254ba1d88fcae518e94acc30018e16c3ce0e61a14687ea615ed2","ssdeep":"1536:qTHaIvOTZSyEIA1pDEBi8yNcuSEAAP1uypq3SYiLENM6HN26p:kHTF0Gq3SYiLENM6HN26p","tlshash":"55f353a6f5a0312de467c61964d0bafe152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2026-01-23T14:03:31.347451Z","last_seen":"2026-07-21T09:15:55.697625Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/font-awesome.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/font-awesome.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":4276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor6.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor6.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114430\r\nlast-modified: Sat, 16 Mar 2024 13:25:16 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x355, components 3","md5":"0ee3bd65c0da396ee56941d5e31832f5","sha1":"d22d9152e8642f56db323f26a16419326b486d9a","sha256":"f3501193b32c906827a1a883444801de4e21c93654c2293aea895812c111ceb4","sha512":"4d3ec89fcd96f53ae501272cc1e4bfcfaeef5f1da3d80b88b8043664d9c8e5ee7ed46f913186ea6054cc04c037b6aa6dc6f33473a7fcb243d44da4c539052f15","ssdeep":"3072:hg5Lw9LiSg8AAN2Yw1ZdxGleZsGyYta/So8ppZsO8:hgRw3AANsTsGBtHMO8","tlshash":"e8b312a0980cd175aaf58757855864eb1a764236ca423feefc4e7c45f00a4063395f9f","first_seen":"2025-10-12T02:42:49.730564Z","last_seen":"2026-07-21T09:15:55.68696Z","times_seen":11,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/swiper.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/plugins/swiper.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:54 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125644,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65270)","md5":"af0f518da79bad640b297887e8d1bf47","sha1":"7a9ff02387a452b44784baa0ddf487669a9c2c36","sha256":"0084c1a86f05f5d5f9a46fe60c258c11264840fdab40f3edd3593aa10e33014e","sha512":"c319a3ede95de738b0ad3ef18983689083bcd7e55d7d5e5c2a8be99139f3b46daed85e9221514f68cfe0804a553813feefd70e7c88e6e5c9f0716b468838ce81","ssdeep":"1536:p4pN4iK5/lsXrSnTLaK82m9lyu84yjRw5Du644gvpuXvH7WcWUmcPqMj3E8EtObB:jsXr4JHmXk8q4gYfH7WcWUmcPqd70X","tlshash":"86c31849b35071d551e72256539ed601a3b66845b90ac0a831b2d8dbacbce8c03bfffd","first_seen":"2026-01-23T14:03:31.334674Z","last_seen":"2026-07-21T09:15:55.665194Z","times_seen":4,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.nice-select.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:06 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-07-24T06:15:58.423431Z","times_seen":10085,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/SmoothScroll.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/SmoothScroll.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":5225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css2.html.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css2.html.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:34 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"93efd63057cc792215654be00ad1fc01","sha1":"5b2c3c63af1f25b69867c4fa118b761092392de2","sha256":"ef21432b215bf38daacb1f06c9bc77a512d933a18f0e1f0e50815ba72f1dec2a","sha512":"ddb7582542d4fef410618de5e4de193fc4bbdaa82ccf0d408aa0a1d767c69eb3cd2c0aa5dab18f3f34d05e84620c0dc747d3c578be0db3f8b0c548f202d4e57c","ssdeep":"","tlshash":"7af081a0483ee521a7905ce9338f2e396e4dd4083126d07d27711c38afa752a4262b7e","first_seen":"2026-01-23T14:03:31.326363Z","last_seen":"2026-07-21T09:15:55.670124Z","times_seen":4,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/s3.tradingview.com/external-embedding/embed-widget-tickers.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-tickers.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":1330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery.magnific-popup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:16 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":21200,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21071)","md5":"f7501bc9635986cd6e48f19c989276be","sha1":"16ebd9b82ddc45699ed629d2e704ce65e0dacf5f","sha256":"f58028704edd4cead02e8bf05f79d788dbae6ada0278c73ee88e28c2dfb7dde9","sha512":"13bb79acecb61535ed197a59db1bbdf27e0d85257aa6c413b774199cc771cc5ba7b524edda7d91186c0ec4cf910f91aa3ae99fa43cdf0295e5bdfe87b1aed0b7","ssdeep":"384:jPhVIXQ2G2XAQyqVxRQ1giCCMLtA4Tn5h5/96l8aZwHwztLCpz3sp:jPSQt8zn5h5F1qkOLCZsp","tlshash":"28921964f2b2b26383a735b8646f700939729953ed06c855b55e84d86efcec89027f3c","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-07-24T06:23:18.056875Z","times_seen":1694,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/boxicons.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/boxicons.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:26 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61766), with no line terminators","md5":"328d560b57ab1df2e5a7c545f941962b","sha1":"e0c5565c50968a52380f9cd5bda59b9a9ca0ed1d","sha256":"7ceb00bdf8e33f6e30e3dc50a872ea1fce58f4d9ce868748d81258cce6f31cb2","sha512":"4f82a622abf7298b351697a8e05ce04b35e72fb8b678773313c391fb3d2496849b81d1243a6b5f3dd37da6df86b2e451eeca2165345efafce3bfd8469d9cca7a","ssdeep":"1536:CL9ULu1kcVaxgG8wP4NM9oUbIpBuK+gZo/Y+H4oyIKadSB/8XwL8:q58W8","tlshash":"1c533ef5e59944c83732e447c784fb4c20aaf931ca461d52f26f941e6ec1a690bc6fb8","first_seen":"2026-01-23T14:03:31.333751Z","last_seen":"2026-07-21T09:15:55.706657Z","times_seen":5,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/team3.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/team3.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 7168\r\nlast-modified: Sat, 16 Mar 2024 13:25:26 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7168,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 182x274, components 3","md5":"17f325b3b69b3a428f6d398387371d83","sha1":"dd54a19f6d1c481a29910e69344589e32166ae21","sha256":"89f50e561c83ded59a80ec4766addb3b95ebb5e452ceceda8b18944e7ef2039e","sha512":"8160e295a74639761677dfab361257c601daa6317aec8ab1819ae32de2a71997365504a80a0645aca164dc76d5335a8c50b8f9577a3f897a68976f50a4a55f9d","ssdeep":"192:yZxPKgpJ20iq7MaKqjmiuxC3T0cfF66ufOTlH1R:utKgv20qFqCxCDDfoAVR","tlshash":"33e18d23b3b6584aec20ebb0961d3cbb19125fb58c3b075f7c5181874ab68395180bee","first_seen":"2026-01-23T14:03:31.346561Z","last_seen":"2026-07-21T09:15:55.71022Z","times_seen":4,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:48.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /script/widget/config/4NFdZwE5iJ HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2976ee0ec938130ca26644bdc7bcf4fc","sha1":"39d1d5257ec805a141be43ad3ca578089c539435","sha256":"71063c6cb814833c5acded5fb88f5f69a18b571a9bf51505a7c208d5507efffd","sha512":"5abe0ea7bfcae38273fd1e819fccd151ba550af508fc64e401ef0a6b1802f1391513549da2cacd7d6f84d3db6a18688493355cc0cbd5324dcd164e81c9a50abf","ssdeep":"","tlshash":"4221f17bd1c118528241901474493609ed8ac91fce7e8a10b8ff4c59bf87997d8b391c","first_seen":"2026-01-28T19:52:13.461341Z","last_seen":"2026-07-21T09:15:55.677986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /script/widget/config/4NFdZwE5iJ HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2976ee0ec938130ca26644bdc7bcf4fc","sha1":"39d1d5257ec805a141be43ad3ca578089c539435","sha256":"71063c6cb814833c5acded5fb88f5f69a18b571a9bf51505a7c208d5507efffd","sha512":"5abe0ea7bfcae38273fd1e819fccd151ba550af508fc64e401ef0a6b1802f1391513549da2cacd7d6f84d3db6a18688493355cc0cbd5324dcd164e81c9a50abf","ssdeep":"","tlshash":"4221f17bd1c118528241901474493609ed8ac91fce7e8a10b8ff4c59bf87997d8b391c","first_seen":"2026-01-28T19:52:13.461341Z","last_seen":"2026-07-21T09:15:55.677986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/npm/sweetalert2-9_html.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /npm/sweetalert2-9_html.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:50 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42452)","md5":"cc7dc1619990b10a7c0d3b85080adf3b","sha1":"4e0f5a09772837a65841275d6a2d4d3f5e116d95","sha256":"381481eef21793fcd2d39d875156adc09e495e0f8411a510f9d6453f5bb7963b","sha512":"48d45bcdef541e55b69334029856dd96b5bf48040e33fc9b709a92ba4c4c843ffb8928a8f1ae803967596ecfc3d96ee715a8d72b1462dd3b40b883cd058e586c","ssdeep":"768:LaCDIKBK6bAQ14K2PkXuzZudkndA1dyKW9RuRFmPu4uqrH3CVdewQLwqcGcMBfwX:LaSBrL4K2NgdkdALdWaRFfsEs9wCO","tlshash":"9763f6857a403123a6ab417968ebe309b6b56542fc330c54f129d0944ffbe8f1573bb9","first_seen":"2025-10-06T03:51:17.579578Z","last_seen":"2026-07-21T09:15:55.714122Z","times_seen":5,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/testimonial4.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/testimonial4.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 24735\r\nlast-modified: Sat, 16 Mar 2024 13:25:28 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 118, 8-bit/color RGBA, non-interlaced","md5":"28b5de3ef9bff37a5bab5426e07f5c8e","sha1":"702a6b74eda9eadf042d904e19a0dbb74eacfc60","sha256":"1eb3ed8bb2cca82f281dab6853b4e8b8dfc4fd3363194c127ee0673108cf1d6a","sha512":"ff8fbe1455f621eb9bc7a74343ed4248e07c6b5afca35ca1ebb7492437e7804f679f0c931213a98fb04c7d8169e060aaf5398a47c19954203c8ec81c727405bb","ssdeep":"384:U3vJltS5RidArhP8+72lEj9cDnkWo1fy57uoaZmNJAb3sqFrfbzy:U/jc5RiKrt8+im9kntEfy5s8qpfPy","tlshash":"40b2f22fe7d04e25b48c6971aaf5e4e3ef218cc9fc097d30a09c9975d68843d55ea601","first_seen":"2025-10-12T02:42:49.793352Z","last_seen":"2026-07-21T09:15:55.735309Z","times_seen":6,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/jquery-1.9.1.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /jquery-1.9.1.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:50 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-24T07:17:38.424291Z","times_seen":71524,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:52 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"696dff7f-7b0\"\r\nexpires: Mon, 19 Jan 2026 10:02:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwG2OAAAAAwBuUwKCQH3AQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb54123a6c5fe52d8687a695ff68702\r\nx-77-cache: HIT\r\nx-77-age: 56\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f3d4385bf1f53862c2dc167f484da76","sha1":"d8e9223208068d2ae39a78ec3081efbd7c77b0db","sha256":"04e59729f1fee45b1a187e06a173a6a56c8652ce93fa6e08f7393f99ca2e60c4","sha512":"f34befc3262a83623a0067045ae26514e73ea58736ac4fc008b5a331544b3190dbeb2eaaf3a12913efcd6eeedfd80497ce1c0f58c0ba360dcffbf240849642d9","ssdeep":"","tlshash":"fd415783c4f80d531b9c622bb89449114d50c3c7e88a3d5d36ad8a7f2f4ceb910e6b6d","first_seen":"2026-01-19T10:30:28.095864Z","last_seen":"2026-02-17T07:12:59.724571Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":66,"dns":36,"connect":7,"send":0,"wait":42,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/about-sig.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/about-sig.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4256\r\nlast-modified: Sat, 16 Mar 2024 13:25:06 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 40, 8-bit/color RGBA, non-interlaced","md5":"a0bd075374c0af7d8bf36487186f325d","sha1":"561cb584d2ccbd332701288c1b058f273c0414b1","sha256":"12069612a95fe2e15054a2c2c221624d942a3bca2cf3d2e7b5522890f8562c67","sha512":"d35d04042e3e3e87f20090bbc5a5b6a88d8d7fa826ea12d423fcb34cc53cdbab9ac2c275ebded0c0373cc8c60c616fc2cb2f376f438928bf162fcfe5403870d1","ssdeep":"96:OkYzKGdnA2G4LqsPMoSTm48TYb+Kyc+4U9:Ol3GUWi48W9d+39","tlshash":"7b917cd9fd8a06803085d3429cd8441f4894d8acc8c0c2307699d4eb43f96e4ea8e0fb","first_seen":"2025-10-12T02:42:49.839535Z","last_seen":"2026-07-21T09:15:55.729472Z","times_seen":6,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/contact.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/contact.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 878411\r\nlast-modified: Sat, 16 Mar 2024 13:23:48 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":878411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1000, components 3","md5":"e578e3d5befabbe88abd95be68550830","sha1":"04407a889e33e9fdef4b7330354ce65f69b59ba9","sha256":"2110e348997f2c054a303b2c09ff110b3c1aa18eb808a869131e48622a009ea3","sha512":"8eaf076856789981af06c004df2d4b8f8a3c80ba53d049b7f04b9af647451011611000068dc2aec6939ac5701c5a371d1380f69dce881bdf05ed9ca59acd6b59","ssdeep":"12288:dbOJsyYqP7ugo8/yQmT5O6dYJePNnWn44r7EqqIrP7DHpHkVE5bS67pNgruVtDD0:uJP7s5QCtdYJynUbEqvEK1SKparW9y","tlshash":"c615232503a0c34ff63ef6358a62d1eed472f1b7b883a636290c4199cb593b12e557e0","first_seen":"2026-01-23T14:03:31.348304Z","last_seen":"2026-07-21T09:15:55.704919Z","times_seen":4,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/owl.carousel.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:06 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-24T07:50:50.326878Z","times_seen":65170,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9V1s.ttf","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:47.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9V1s.ttf HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/css2.html.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2976ee0ec938130ca26644bdc7bcf4fc","sha1":"39d1d5257ec805a141be43ad3ca578089c539435","sha256":"71063c6cb814833c5acded5fb88f5f69a18b571a9bf51505a7c208d5507efffd","sha512":"5abe0ea7bfcae38273fd1e819fccd151ba550af508fc64e401ef0a6b1802f1391513549da2cacd7d6f84d3db6a18688493355cc0cbd5324dcd164e81c9a50abf","ssdeep":"","tlshash":"4221f17bd1c118528241901474493609ed8ac91fce7e8a10b8ff4c59bf87997d8b391c","first_seen":"2026-01-28T19:52:13.461341Z","last_seen":"2026-07-21T09:15:55.677986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /script/widget/config/4NFdZwE5iJ HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2976ee0ec938130ca26644bdc7bcf4fc","sha1":"39d1d5257ec805a141be43ad3ca578089c539435","sha256":"71063c6cb814833c5acded5fb88f5f69a18b571a9bf51505a7c208d5507efffd","sha512":"5abe0ea7bfcae38273fd1e819fccd151ba550af508fc64e401ef0a6b1802f1391513549da2cacd7d6f84d3db6a18688493355cc0cbd5324dcd164e81c9a50abf","ssdeep":"","tlshash":"4221f17bd1c118528241901474493609ed8ac91fce7e8a10b8ff4c59bf87997d8b391c","first_seen":"2026-01-28T19:52:13.461341Z","last_seen":"2026-07-21T09:15:55.677986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/banner-main2.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/banner-main2.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44267\r\nlast-modified: Sat, 16 Mar 2024 13:23:44 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:49 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 654x469, components 3","md5":"c6959fc4c650b8861b9230e286876659","sha1":"142f8f54474765ebd72feb7c8c866b144284ade5","sha256":"55ae3c8c35f04d3fc10e9f1a2391bb94c3afcb38921c850f7c0cffcb2384e5e0","sha512":"b15617bb2fffafcea920ec6f29a574299c3dd2a77eae51363acdc13f7f15cda634287063ecb7f89d69a242f8837a5fcce8bd4afeef1a31f7c90cf18f6462f4d9","ssdeep":"768:jz9i8VAdOgIEzdTGCQ0RDuiC6VWpJUXSAnaIAdxi9Ca34mpLMeaGlMPurc/Xu:o8CdOgIEztQ05W6UpJacfi0a34YMea/s","tlshash":"8113f119a6d76d0acb9edafbb990d945510b3204d8071f3d387a2fbb182b980b17f419","first_seen":"2026-01-23T14:03:31.376479Z","last_seen":"2026-07-21T09:15:55.740542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/SmoothScroll.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/SmoothScroll.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.195.1.42","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:52.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://capitalaccessreturns.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fTcHGXCzfOAQjR0eFkIKCg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 28 Jan 2026 19:51:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: UsB2PCYXJnfyaIn6bxsn/+5raZA=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":246,"connect":266,"send":0,"wait":23,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/CustomEase.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/plugins/CustomEase.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:56 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4844)","md5":"2febc5658a238c06e788ada0251bc165","sha1":"320ef6659bb37fa743973f857a2edeb6ec13cb86","sha256":"f92fb419251392ba608202751b99df9a7292ba1e2c55fc44da0351eb6e5aa799","sha512":"90efb0995fe1f50e95a2244db03e9f6c425262e9a0ca9f5e1509d51ce8e335f71a355cb084fd9b78fab3a2cfc90669ab1ce240e3d60e97203a64ae0c0f1e92e7","ssdeep":"96:jfBV37hsRtEyrioTm2/8iNTkOwR2mB1iNafe/R5FiqREL/GSYFRN809cQbJfdLwD:jSRtv/T/yxBe7ReuRFcEJVLwD","tlshash":"80b108a9503470a5958a2edc081f2c979b77986ab70c3b3ffb6448d91c20be435dbf25","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.737182Z","times_seen":33,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery-3.2.1.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:49.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery-3.2.1.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-B-OLLYpG.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:52.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-B-OLLYpG.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:51:52 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-9183\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3tmgMAAwBuUwKCQH3DwAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb54123a6c5fe52d8687a690df5ab06\r\nx-77-cache: HIT\r\nx-77-age: 813238\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37250)","md5":"2052cfca49186988b2bd90a4a812a795","sha1":"8c31463bec24745479731221d847ec0a6d2b8337","sha256":"f4257f5a00c3ca86166edd00fb26cd15e4051aaf442a8660c9f33570da08b8d0","sha512":"39072c2ed68b9170d5ce9f6449fc2a456b9cebb79749724e65b55d111fd9482fd5e07cb0dee42e9a4810f39fd4bd2c7bbdac9c786afc1be6b259429853c49770","ssdeep":"768:E8C94TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E8W4TcCWYtdXjuPF4t2Z","tlshash":"b1f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-01-19T10:30:28.096588Z","last_seen":"2026-02-17T07:12:59.719508Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/SplitText.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/plugins/SplitText.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:56 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8657)","md5":"0a55ea1ba25bcb38d84ddc5f334e06f9","sha1":"d4377780b0b64c47ce02cde391a5cb513b1032e2","sha256":"f48b7a8ad4b230a69285938a65bb86cfcc6cec9ea2d5d1da1fdef13f18f4558d","sha512":"f75ed9d3f7600905afb9e129ce6299395709939c4a11f821e7c90be3a9aed93d7b92cd4a645a7ab27cb7b480bea8631875c7bd22bb9e7a44bfd44603c19d297b","ssdeep":"192:jSHEWQ/LZ91X1LTUnNnsvYmVDgnqWB3zwbZLClldw1KD3r4rv:jSk5zZ91XdTisvHqnqMzwbglldw1a3cD","tlshash":"9012e89c62511661c5563fd82aaf2a0375751926ba1d9c38f68c9cfc1928ce830eff7c","first_seen":"2023-11-03T06:24:24Z","last_seen":"2026-07-21T09:15:55.701538Z","times_seen":8,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/home8ab2.html?v=%22%20+%20Date.now()%20+%20%22","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:48.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/home8ab2.html?v=%22%20+%20Date.now()%20+%20%22 HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor3.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor3.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112463\r\nlast-modified: Sat, 16 Mar 2024 13:25:12 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":112463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=DMYTRO SHEREMETA], baseline, precision 8, 520x355, components 3","md5":"6fdbde3d15841ed95d924f81cc8c3995","sha1":"6c252cb8443a56ff0c12fb93c0fa95cc8f1d1295","sha256":"97d81fdaa35264d3d2d179b9bed381a7d1b6161dfa923925275ff426bb630457","sha512":"851bb9c9fa167e3792d60d235fa2a38a9702072d57e9fc2312ec5c918e6d01a033110df94d3e486bee9f264c5dd7d45418d29ce26eb9371983266cd334ba1c22","ssdeep":"3072:M5mwirDRRSnD39vPGgKTIZ1wDiPqkey+2ic0:2qrtEDNvP4U1wDiykc2ic0","tlshash":"51b31237ab0372a5c0efdc5333f15afa4058f9a2652792b519c98666c920fe1d6870cf","first_seen":"2025-10-12T02:42:49.801757Z","last_seen":"2026-07-21T09:15:55.739681Z","times_seen":11,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/favicon.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 3906\r\nlast-modified: Sat, 16 Mar 2024 13:25:32 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:50 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3906,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x124, components 3","md5":"4d3466d2fa0a5eff0aa89a8741be6ff2","sha1":"338853a9b13edd82717aba55e025339669e47416","sha256":"3e7f9f87caea321fb19f285b034a44af8d7806f20bfccdc8db816fc11cc23bad","sha512":"802ddf4d92c6d2502c648eb82184c40052ffb895a21cac3cc7a748e20c17b08f020b98e5a45526af531939aefa108498f8bdfcf53c67aba171237006c0023d5d","ssdeep":"","tlshash":"b7814a2da36c8e7ef2374b3d349247d3f75dbf00204213a4d58a67e511e5bc22ae8982","first_seen":"2026-01-24T12:40:27.625042Z","last_seen":"2026-07-21T09:15:55.728653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 10:30:29 GMT\r\nexpires: Wed, 27 Jan 2027 10:30:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120082\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-24T07:42:10.58804Z","times_seen":52671,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/magnific-popup.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/magnific-popup.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":2980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/css/owl.carousel.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/css/owl.carousel.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:24:58 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-07-24T06:52:43.35271Z","times_seen":42405,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/2.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/2.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 79274\r\nlast-modified: Sat, 16 Mar 2024 13:25:30 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 534, 8-bit/color RGBA, non-interlaced","md5":"d5515bd91563c7ba6bc3e6212e3deae9","sha1":"07d4ed7a8634e1d331263948ac761d31cea98c88","sha256":"9d731fcc7f5b5e04661274058ab6c2a59e8962c70b9f6fe5b16a979e0c074dba","sha512":"5378838b82f3ac9b451acc1192d206497b9b002709f0f7d6b82e61f627f7da872f353f9c3f75f0b76bf533f509f242d68e351f8ee1dedee737d5bc5741b804ea","ssdeep":"1536:lXeAsBB5Ec4CnqQr7GzCN13mhKnVW+C6ICLSewgbiGVpQVp/zc9n:JIb+c4Ty7GaUAjsCAeiGVczyn","tlshash":"6d73f1bd8cf0eea81596463d157a28c22da39937df106cc976de915c4f31bc8bd825c4","first_seen":"2026-01-23T14:03:31.316171Z","last_seen":"2026-07-21T09:15:55.703952Z","times_seen":4,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/plugins/owl.carousel.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/plugins/owl.carousel.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:52 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-24T07:50:50.326878Z","times_seen":65170,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.magnific-popup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:02 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T07:21:48.889573Z","times_seen":71678,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/css/flat-ui.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /ajax/libs/flat-ui/2.3.0/css/flat-ui.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:24:52 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65430)","md5":"0a5fd3abb9a1c4b323f168d8e3953212","sha1":"2afe85d680186cba942b9c8bfba521fef6595109","sha256":"c9c1b69e5634c5abb5f1f5327487ab334bc7a3465c1345db3b6ab20a0c89e0b8","sha512":"5c273e72e66639b30308b83cc92faca079f91e9150658391223c4cdc33c5b8de415051f82144d3aabd1d7fcad733b02e130ba6bc0647b73e4a7537613bec17ad","ssdeep":"768:SK6mhjlK4m64FNEWKoOaZfGFJA3moxVZl0v6/0Ph:1Hh5KRntf1VEZ","tlshash":"7dd3b625b9283076763f887e70f0ead71a166056cd054fbbf16b35a8cb8908a2733f15","first_seen":"2026-01-23T14:03:31.371135Z","last_seen":"2026-07-21T09:15:55.720769Z","times_seen":4,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery-3.2.1.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery-3.2.1.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":4632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/js/flat-ui.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /ajax/libs/flat-ui/2.3.0/js/flat-ui.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:38 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221872,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13939)","md5":"5b04c4cc1ba34142862f94d6ce6d1cee","sha1":"a2bb6302052863a17312ce3c360d9480e8fa2d00","sha256":"33cc2bfefd536a71d11960fd33288746ac01d29cc05238d4543cb3abc3089d8d","sha512":"186ff5cfa07831525d40ec37e65138a2dadb8ddd96615fb3857823511f834de68073bb3f8a3816b1ec4449c48e228f09e119610b6f0255eac38d84121fcf5e91","ssdeep":"1536:NhImBtoyYN1mtq6tZ3JVAr2MRCqNPbVzDFJmXGe783ZRcz3WkxjT3rCkOZU1MrhF:G1K3JRM9tGp8p6z35/OkOoxI","tlshash":"3124e789b253726256af60b650bf010f7236667ea409882cb479cde96d78d0c317bf3d","first_seen":"2023-03-08T16:14:06Z","last_seen":"2026-07-21T09:15:55.662464Z","times_seen":31,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/bootstrap.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:12 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-24T06:57:30.092838Z","times_seen":96317,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/fonts/boxicons.woff","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/fonts/boxicons.woff HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/boxicons.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 89924\r\nlast-modified: Sat, 16 Mar 2024 13:23:24 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89924,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format (Version 2), TrueType, length 89924, version 1.0","md5":"aeaf4ee6e2c712532f982c8a4dd68b16","sha1":"34678774d31a23d9fc6a96db5d1984810b50e560","sha256":"1ac6dc813de3dfdf87051562c40a4332c5c80e1854137b0eb8eb4297d8eda2d1","sha512":"467be6b80cb96627b7ff5c9e69cd5da58cdb44e32a1422cbb15e58c78c4d09eab85102a141c33bee2b6b842b8d1b3e98804d84518dfe6f47c48e3f3b0b2ac941","ssdeep":"1536:0BXCWSSxXzYq5qp0NoyUR+8tugJfrF643K5YHjsUXmRm:0BXCNSxXW//RrtJDF643qYDhWRm","tlshash":"c39312f8afa0e0a8e430d237973f58a843d0b755b67d9ea645abfd0352993d58352303","first_seen":"2023-04-14T08:39:51Z","last_seen":"2026-07-22T05:04:42.721675Z","times_seen":580,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/faq-bg.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:47.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/faq-bg.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31999\r\nlast-modified: Sat, 16 Mar 2024 13:23:48 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:46 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x646, components 3","md5":"98fd412ea8c00afb06659bb414ab0bcb","sha1":"e45a70835ebcea07c35a9a4991cf1b7e2a4b47df","sha256":"f7501743a2c182e4a18540f5d3557ff3c7daf6173a1eeaf9345feaad5a7621af","sha512":"051122a5a27e2cf139097cde6efbd79d97160cd5c74768caf0734e1bc2e30a84c55f5d77ae1725815606c75dc089b2587713fd5835940d1093f762abebc5397b","ssdeep":"768:yZOjNLgF3nZAW+cTp+z6MmC0liO/3HsgzM:yGYJAFcTQrmtVX/w","tlshash":"96e2d0133f0041c1c6eec6b19287ab152eda727aa761458fa29583bdb45f30fac45f83","first_seen":"2025-10-12T02:42:49.832458Z","last_seen":"2026-07-21T09:15:55.71943Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"err.jivosite.com/widget","fqdn":"err.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:52.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /widget HTTP/1.1\r\nHost: err.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 599\r\nOrigin: https://capitalaccessreturns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":599,"data":"{\"widget\":\"true\",\"level\":2,\"url\":\"https://capitalaccessreturns.com/\",\"lineNumber\":1,\"fileName\":\"https://capitalaccessreturns.com/widget/4NFdZwE5iJ.js\",\"column\":5748,\"full_message\":\"Config urls: https://capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ;\\r\\nhttps://capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ;\\r\\nhttps://capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ;\\r\\nhttps://capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ;\\r\\nhttps://capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ\",\"short_message\":\"Config load limit is exceeded\",\"shard\":\"main\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\nserver: JivoTelemetry/0.9.7\r\ndate: Wed, 28 Jan 2026 19:51:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":217,"dns":40,"connect":41,"send":0,"wait":42,"receive":5,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/font-awesome.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/font-awesome.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":1387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/css/owl.theme.default.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/css/owl.theme.default.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:00 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-07-24T07:22:26.184135Z","times_seen":26297,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor2.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor2.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76308\r\nlast-modified: Sat, 16 Mar 2024 13:25:10 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76308,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x355, components 3","md5":"dfc964a4cf5ce19ec6c52c9b5968ea59","sha1":"340458ac8d3068dffb903bd3d8a08319ce08f92c","sha256":"9e17c88384ebab8a14797b2a010894f02dc6ff2f998436c3eb6253a4b1257558","sha512":"f3e2de5943f1ee4b41f8f592dbce73753f1177f81ed874c02d5899eba22e774c34cc9a61459bc22eaf69635953e1d40e0460a6b41c7f79497b3653abd7013d26","ssdeep":"1536:C8FJaOIWS4zyzbMOjv+ANQ5WGqrw5+7Dhr4xU:JkbzYCmJ4GqF71rZ","tlshash":"2e73122ed693e432554ea2a27457963ff4677faafb80739000280c38ff9917dd121a97","first_seen":"2025-10-12T02:42:49.849742Z","last_seen":"2026-07-21T09:15:55.681384Z","times_seen":11,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/banner-main1.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/banner-main1.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133060\r\nlast-modified: Sat, 16 Mar 2024 13:23:44 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:49 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x576, components 3","md5":"e92d5ba595e2cde629bd328d73cd4faa","sha1":"9cd264b1a1e12b835cd4608fbbdd51cb47391ea7","sha256":"7e9040702f74c95ecc03ef49a6e8c20d76ed2607cba56760dc795bc379c6ce7a","sha512":"b0ff7a17628e00513e7c2e4dc6f13370e60597051512671c164c43dd59389a0b5b4284036cadfdd3d580124808b071c2fad8013b77672e24a0de9035f5d53e28","ssdeep":"3072:LNusXOMe01sv02EtTfRCk/qvezWN0gpEI:ZusZV1C0fRzsP0s","tlshash":"48d3122db4a854e549a12272d4420e19a57feceb140d2dfb90462cc22f51e9b2e52ffb","first_seen":"2026-01-23T14:03:31.342978Z","last_seen":"2026-07-21T09:15:55.67241Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/team4.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/team4.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 7549\r\nlast-modified: Sat, 16 Mar 2024 13:25:26 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7549,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 215x234, components 3","md5":"09ce83ba8642821fcdb2cbc6436ce6e1","sha1":"7d5cd1bbcd6f4e5fa695c8f6dd7b083041ca085c","sha256":"27e392ac503c74b03328dd12fe330a2e39b44bf07244738216d09c75e04c56f3","sha512":"f35886a35c5e68cc51933c8de6c178ebb93fab848b8f42ef8b441ed1415a1b3bcc80049fff2c691636975613011e30c36565dd803e0beb3bf463f0f152133029","ssdeep":"192:PUwD4tY4DKJbdOOZnq9qp4DJL4bcDbhRTmlo6j:ZCYEkpZlp8Kb2bh0j","tlshash":"e5f1af132f7502d6c141dea719873b96e39ac843982079d24ca66fd8a7ed0c0715fc6a","first_seen":"2026-01-23T14:03:31.338839Z","last_seen":"2026-07-21T09:15:55.72436Z","times_seen":4,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/owl.carousel.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:28 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":3352,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185)","md5":"d964cdd4d9e85b8c1185a92bae34b049","sha1":"a0e2d64bcbb108f0415f364df5b6fabb8a290365","sha256":"aa7e59e6ec8871088cfeb47bac59a6475c815357deef042c61a5c3c965390546","sha512":"acc8bae151fb7542dd53d2a3ecacc9cf09e18109958970dd56d8b1cd2643811f9d5dfdf8499b5cf74e8cfdc6ad85e6be6d9cddea68670a368280576e9c093a13","ssdeep":"","tlshash":"c061bbe5314a265f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-06T17:45:15Z","last_seen":"2026-07-24T06:15:06.218022Z","times_seen":2252,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/styleswitcher.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/styleswitcher.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":4262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/modernizr.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/modernizr.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:44 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14596)","md5":"1258d3cdc71540b07f3422a31e41f21a","sha1":"a426c47c8eb8910ac2a552b2e51b8791858da693","sha256":"7e26ca2fd58d9878a3754800828a0b4a1af34f747c19c7d48ff1add55b1759c3","sha512":"b08b8e0cb38bbecbdf8e2781789bcaacf81a8307ccdf379248b0f593eb2bcfc951143157f8f6082ef9c7353948b34332a3e1080c24cc7579be6f27dd6115b158","ssdeep":"384:AEeMgHW5MfTcaGd+lhomA581KQoZRY5y6pHh1pz:AJMUhh/AmKr25y6pHl","tlshash":"bb62e9cdb253b11a4397607a61bf460ff23e9899a8184854f059c5acbe74cac473bf1e","first_seen":"2023-03-07T01:20:32Z","last_seen":"2026-07-23T16:53:33.993084Z","times_seen":1064,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/help.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/help.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 39727\r\nlast-modified: Sat, 16 Mar 2024 13:25:18 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":39727,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 595x394, components 3","md5":"3d4cc3606c686d26097dc6bae89ce4a1","sha1":"f3b2b71e1e9fea0535efc5039618c92cd7a6d76b","sha256":"495f491d3c0c0341fa2b638f0ced6a9e6cdc4020ae210bf508a3905dedbe0bf1","sha512":"05b23784042855bf4bfd33f227811f63e1a6052b8618340a96d1702eef1b46075b151a20a7a41ced5ad264dc3f93a4e980fbeb647880141b31582220afba5ae5","ssdeep":"768:gZa48fseIo3Vf6szLie0qhIfdjHWct/G9iVZhZJCIjrJvyI51Zts/:gZa48fsJo3VfHzddhKHt/G9LI/xv5K/","tlshash":"df03f1d27e5dc488d320faf0db5aa422746615a8426ff16b5cd588ec13b83e76f83711","first_seen":"2026-01-23T14:03:31.332956Z","last_seen":"2026-07-21T09:15:55.717617Z","times_seen":4,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/nice-select.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/nice-select.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:30 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a7ace323b9fc8a831a6e64feb23fa0b9","sha1":"9317ad29306bc72eb3fa92981be8141fcd394e7c","sha256":"c13280e79f74109c5e3854822c0f0c972d0a57245c95b0b3762f9788bd918f8d","sha512":"b87b828a0726bf70724ea050404c278175a4ec4fcd68f60ff821609699173e74506d2b9b26610436087e8ad44361b595d1f519994cfb7c3ffe24375e4050f9f8","ssdeep":"","tlshash":"2781e2779b530141642a876fafd62b582339c003b826cdacbbdd960b8f0d5dc94e6747","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-07-24T06:15:58.476253Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/advisor.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/advisor.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 769326\r\nlast-modified: Sat, 16 Mar 2024 13:25:10 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":769326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x844, components 3","md5":"69bc4e8dac8a64ce340bc374df47baf4","sha1":"1d35ac12953aa0ec9445c84e2f527534c0dfd5f9","sha256":"3e67b718dda8982e6f7b80099d0655696e3234c86618ef725554185e576b2a36","sha512":"3d2684b383c909cfd51a99396b377162a8b7026e1f69c0e92fc7f09a741866ed62444a77ad7bc5189224a5ee768fd7ae4b87241e753c71315402ca3a946337dc","ssdeep":"12288:U3CiQyfRFJXD0sclRIRK96hsKVqSBkIfnWdq8hx2aIZEFa5zYpWg5ZrIOt06tpAo:aQyVzgRn94qmk5NEZf8RZXd7h","tlshash":"d1f423aaf060d8edbd606c320fb0df284788552c69abb95c0b02c65fdcd4b55a18b7dd","first_seen":"2026-01-23T14:03:31.345525Z","last_seen":"2026-07-21T09:15:55.708054Z","times_seen":4,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/popper.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:00 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21084)","md5":"84415b7368fd6fc764cbe86039ce0626","sha1":"62f238e73348c77eb9e865426a7d1b7de23cbb2d","sha256":"c776195ad46333c6c9a9fe3c74502ffea9a02faf122388ea3567922cc65a3060","sha512":"8423f7a626064813ea9d7ca974ac4a3d23b304717be6853cc10f356ba3a21971c531e2acf7ff0285b81897ba54bf02265c96f4dcde1bb35a350f399ba2479e17","ssdeep":"384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti","tlshash":"c8a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2d97c30ef9917fd79","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-07-24T07:22:26.214105Z","times_seen":15544,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/select2.min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/select2.min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":5022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:19:22 GMT\r\nexpires: Sat, 23 Jan 2027 13:19:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 455549\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-24T07:42:10.611912Z","times_seen":74744,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":36,"dns":2,"connect":9,"send":0,"wait":11,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/testimonial3.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/testimonial3.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 26872\r\nlast-modified: Sat, 16 Mar 2024 13:25:28 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":26872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"a43797d9f3a20bdd6b1bb475a8663398","sha1":"8559bd16c6094c4bb9b8b2a12c4b3594ee86d82f","sha256":"415b8915fc8ed544bd1f56da451506393496c892011e440ba538742f3c6fca40","sha512":"1a60f164b5b356df7d93bd32ccf8505d0d27fd3860b2be512da15a51d7ffcf4aad131161488ac6dccb788900a95c34a846238fb396100fc896721902ebc06e3a","ssdeep":"768:Iv6kpopYWb3zU4E6qKQlYdoYC5WSYg/ukw5ciWDvw:G6kp6g4EbK+Ydo55LQkz3vw","tlshash":"b1c2e11edaa163214852dc7b87b4b6b7ab439e12ce0446e729acf440dcf90c465c4abd","first_seen":"2026-01-23T14:03:31.337097Z","last_seen":"2026-07-21T09:15:55.727729Z","times_seen":4,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/testimonial5.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/testimonial5.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 8615\r\nlast-modified: Sat, 16 Mar 2024 13:25:30 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 59 x 59, 8-bit/color RGBA, non-interlaced","md5":"bca93348c41ec84df62dbb247dd8a1c1","sha1":"7c7eda2a704350ef304f7af1049d3d24e2802035","sha256":"1b12038daf13aaa5399956a440d48c15d2b9b9e8e1f8133110f9dcafa69f6213","sha512":"f93096b2b9f99458396d4c31bc125ab4bf8595b986c01d50919e43bfcfcd8501492d7c6207ccacd48a04adb99efd7e1e7dd81a1b3cb6d67612f792a2ed968d5c","ssdeep":"192:lmO5wy5ywFJW8FKCajcMIx5R1HPXbZf7Jz1Y4:yif0Kajcx5/PXbZl1Y4","tlshash":"4902af377ce231003b298a616bf54cf2406d6e0e1d8f51297b59c45b4d153b37568bd7","first_seen":"2026-01-23T14:03:31.358881Z","last_seen":"2026-07-21T09:15:55.725212Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/jquery.fake-notification.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/jquery.fake-notification.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:50 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (709), with CRLF line terminators","md5":"6612749f0e9fde1c01fdc0b53896e5c3","sha1":"bdb5b2b60d6e7cf8993c4cb775839a4b5d342eca","sha256":"f662c40f3cdfd498a0a9782d4a6c31401e835bce0681b1015a4120f18b074ac0","sha512":"0b9a6f07ba7a3181ef70678d3975086d8bd399db12ceb7e9b626d450dcd12365b383a76ecb0309b6f179806e5314e02218d8ac54d56050506913a86de1263bd2","ssdeep":"96:SOncg0Fz+85G9G7abWF1siyTz+2OwFyXYWY7:SOv1daF1si8zJOwrWY7","tlshash":"7991109f6111105a53b3e23ed6afa488df72020f89420659381de06e5ff577c6396ee8","first_seen":"2025-10-12T02:42:49.711914Z","last_seen":"2026-07-21T09:15:55.723496Z","times_seen":9,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 4144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 14:02:55 GMT\r\nexpires: Sat, 23 Jan 2027 14:02:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 15 Jul 2023 01:09:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 452928\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22367,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22367), with no line terminators","md5":"b0b46b807eee39af0aad8f5fefc9b3a2","sha1":"0fb04f15599bc0844063a6ab776c86e73cb9fbfc","sha256":"71ca2652e2b3ffd3c0ec966958604714ce6c7af01d961b44adc438518eb58cb3","sha512":"4eec49904a5480940124a1c1b9c9dae764ebb115829cbce4356e66a1d7f077dfd204a4634b0622ffb14cc6ebff7062d7f30502bf0bc7d998a1a55fc8c876da8e","ssdeep":"384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG","tlshash":"78a2bb21479ed01963afe85354d36dff72d488db50113eeaaf5a3352cd822f231ea215","first_seen":"2023-08-05T13:27:36Z","last_seen":"2026-07-22T08:57:32.537022Z","times_seen":1496,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":122,"dns":2,"connect":18,"send":0,"wait":9,"receive":1,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/js/calculator8ab2.html?v=%22%20+%20Date.now()%20+%20%22","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:49.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/js/calculator8ab2.html?v=%22%20+%20Date.now()%20+%20%22 HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.bitcoin.com/widget.js","fqdn":"widgets.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"54.150.142.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.bitcoin.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 31 Jul 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:FE:5B:1D:66:34:2C:8F:5F:86:06:FB:E1:98:C6:18:E9:6A:0A:57","sha256":"23:2A:07:D5:A5:E5:A6:62:FF:49:4D:A7:DA:A4:F1:CC:7E:15:C0:C3:DF:84:A6:34:50:16:9F:33:EC:03:16:42"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: widgets.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Wed, 28 Jan 2026 19:51:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://www.bitcoin.com:443/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":2230,"timings":{"blocked":971,"dns":44,"connect":285,"send":0,"wait":285,"receive":0,"ssl":642},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/magnific-popup.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/magnific-popup.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:28 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-07-24T06:15:26.400941Z","times_seen":28667,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/css/swiper.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/css/swiper.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:00 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":19778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512)","md5":"7b7697ceb019167bb5433df23dec0205","sha1":"5e3208d4a25af2d92e87246bf979e2f3608b363a","sha256":"e65f16b5e41f77ce09ab9d72747b5c9dd6c646f802544dc3d3eb3def2578a26b","sha512":"93406c1ae64d7b2b2cd75e6f8ff8836cc9527a0efc05ffbb85aa5d1a9dd528a658f2df1c5b19f2cda20fc07d36b39299a1d31f0dcddc156a26d4bb832f1cfaa4","ssdeep":"192:vwSAaNf/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:vCa1/lS0Cifi5o/mXOGJ5c","tlshash":"7592612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-10T09:37:48Z","last_seen":"2026-07-22T05:05:26.514891Z","times_seen":943,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/testimonial2.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/testimonial2.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 30211\r\nlast-modified: Sat, 16 Mar 2024 13:25:28 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 117, 8-bit/color RGBA, non-interlaced","md5":"5a25505ee02067777f3836e3f044bf35","sha1":"881f7207834f3ea58f7d6fe902462ee0d91c8f85","sha256":"04cec029a1df795b1538de93cb95c147eaa4ac121cdc022d39b65249bc7f34a0","sha512":"f526f96a17d7b87e04f76378c61854af9f6f64b847133b1fb1af28ccb2f940889b2a2b80e1ee7932acd29a464a48f5ecf25128c70916e943457da9f92933462a","ssdeep":"768:VWgH6FuSlyPEkMKuniuKy00yPpiCZ0GV1Nuoa+pCpc5:VWgHjSlDkMXnngRiCZ0Y1Nuoa+ck","tlshash":"38d2e13fd95585a18311038e49f9d3219c063810d26f90a9ddf28e4baf188bf71d96f6","first_seen":"2025-10-12T02:42:49.772939Z","last_seen":"2026-07-21T09:15:55.667526Z","times_seen":6,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/custom.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:10 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":6243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9fa7886292e4b93ae293d9e8f05504e7","sha1":"316a624b2215029a2b7adcd9afbbb7407a802929","sha256":"c882be09bb6c0a2d351ff0c4d0db4349b7d8e2e5e6e0ef994f5e5fae1d7dafb8","sha512":"5a1965db87bab98573e21b88be94a3c1f42cfb014fc0ad44fa41281e4635d1813db02c2c3ee6be0637018a07b37f13fa51bcf622fc67434e8d4f9d7224dfccf4","ssdeep":"96:uEszzmIDP6QmihMHP31jiKFpWtUUKADP6QmihMvDP6jjMFNPlHQFNPIjHAPpjitv:ls1LMP3LiLMvzWazq/O","tlshash":"d3d12104f6ac12b419bb74ad89fd60c25b2d2003e80e79f6f4ed05685f9876e21b7e53","first_seen":"2025-10-12T02:42:49.709408Z","last_seen":"2026-07-21T09:15:55.695674Z","times_seen":12,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/custom.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:20 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":20256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"72fd4856abcbc327a928b759de69abe0","sha1":"6f4d7b78c2d9234300ba100c91688a3c647038d4","sha256":"612f96e17343199390a154453c5d1d46f733392c583ddc7f72ede88ba7e09bb0","sha512":"16c21e62964dba21c2026406b2bde09065a776ed58fedd089261b1c3d158fcbd68bbe5fd186f76c4e68c94cb175b7d8a02057f1ce5f09b983d2ebdc40d8b6f1c","ssdeep":"384:ssx0WEx00CVREv9df42blpr2gfoH2Y8dCedSuIuleB:9xaxq/Ev9df42blprk2Y4CedSuIuleB","tlshash":"20920006bde528a280bff23b6f9fb118f132916b9604cdc4394d56841f54a24926efdd","first_seen":"2025-10-12T02:42:49.755057Z","last_seen":"2026-07-21T09:15:55.71846Z","times_seen":8,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/img/shape/circle-shape.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:47.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /img/shape/circle-shape.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3585\r\nlast-modified: Sat, 16 Mar 2024 13:24:24 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:46 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 115, 8-bit/color RGBA, non-interlaced","md5":"9666e43d149375ca7a6a77b16cb28ecd","sha1":"e98c2b540bc08e6bd8d3eacdfbc0903b158b1615","sha256":"2cf24de13914211ff74d8025c29fe18a0c01a5e03f73eb2b289c25e22e533ed1","sha512":"bf05021266e5f63ba90b2dd33ee6636cebafb1653eb5eba68c3e198efb7111ae6852bb1e2964b44d3f097018b29e55d34dd5b68dcbeab069a4f092058209c667","ssdeep":"","tlshash":"ec714b0ac6a1e464773cd4852ce3659b88968e01c7d4d57a7ecbc02e973c1959415ace","first_seen":"2026-01-23T14:03:31.361582Z","last_seen":"2026-07-21T09:15:55.711109Z","times_seen":4,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/css/owl.theme.default.min.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:42.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:28 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-07-24T07:22:26.184135Z","times_seen":26297,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/jquery.mixitup.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/jquery.mixitup.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:08 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28522)","md5":"0850ae304b0eb839c556c01fba3b3982","sha1":"2666b6f895685e3c7b3f97e56e3f995b84243f36","sha256":"a7b4cb3db2cf3d417e8e69528fde70b5ed09686cbf54cb06e5dd993dfa452670","sha512":"b283d1fe308ffe8084c6069abac2d8a55bff6b39f19fc62c9e9ec7b87df1986f7f8ad85402c1ef9e27839810a78fbab0ca273c56f790700ec0c97f4bc3b4c25d","ssdeep":"768:PbVEg7ZYHQY4KeCWTNkx/vzGUv8U4n4w/s4:z6N4K7WTNK/vzGQ8U4n4t4","tlshash":"62d2f781335834b1160313f36eff5a0ab43bb1a5a505c864f935c4ea1aab945b273b3b","first_seen":"2023-03-07T12:11:44Z","last_seen":"2026-07-24T05:37:50.674835Z","times_seen":1199,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/skins/green.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/skins/green.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/banner-main3.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/banner-main3.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41992\r\nlast-modified: Sat, 16 Mar 2024 13:23:44 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:49 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 678x452, components 3","md5":"f8a545009a22d29beb20be6beef911ef","sha1":"50cfef67c752aecd45dc7d45894f76286e01c8e0","sha256":"a75bd75cc449c1fbbc20f3bafc3b7b5f4d9b2b76b06940ae99046f6d6171107f","sha512":"cefa74e1c157b18f1e25ad53506dbb3589e5f4bcda8cba7fcfcf584ffafeac6c166d04531f6e5fa3e56ec455c9d370540c7fe0210d08160d0ae31c1e1dfd3209","ssdeep":"768:GiKFgiwCaHwR9AXPYpZVqILBqpozyIo0JIUMVxKCvPL9KACm:5KFg9CKw+PgZw0BfzZoYOKCXL9Kvm","tlshash":"b113f22e2d78eaefec03b63602d056675f2009ed3099f25ff08597c2a54959362cd4ed","first_seen":"2026-01-23T14:03:31.350045Z","last_seen":"2026-07-21T09:15:55.732307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget8e98.js?2814","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:50.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget8e98.js?2814 HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.YJ7Kn-ahZ40.O/d=1/exm=el_conf/ed=1/rs=AN8SPfr_YM9qeBxeMaLFUIz_54D0Il6zXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:51.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.en_US.YJ7Kn-ahZ40.O/d=1/exm=el_conf/ed=1/rs=AN8SPfr_YM9qeBxeMaLFUIz_54D0Il6zXw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 73492\r\ndate: Wed, 28 Jan 2026 19:51:51 GMT\r\nexpires: Thu, 28 Jan 2027 19:51:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 12 Mar 2024 21:10:58 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":213165,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2333)","md5":"20fadbda7c6267f7f1e86e4814b85001","sha1":"4a9d2b065a91a61d4d1114c59e1be77a519ad6e8","sha256":"6e9637d88d9f99aaed1bda9658285ec2e69da1bb98f07c78e3d5a27d7358a496","sha512":"f5cb6946ecc37d84429709260535364f600cee5bdcc968eeb24e9867217fdbb8e276527900664d44a9cc78fb9b086bec7c82d303a091d35abfa682f3aa843be3","ssdeep":"3072:HeAIrFGMd+HxaxpApqC2pJ3UXImlZuvNNbpgaY3O0xN5gqa:H7MkcpJOleY+KNc","tlshash":"a324e9d9b2527166d263f4a6513f004bb23b6859f8484dacb28cd8e2adf491d017bf7c","first_seen":"2024-03-14T02:43:52Z","last_seen":"2026-07-21T09:15:55.754007Z","times_seen":39,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":74,"dns":18,"connect":16,"send":0,"wait":86,"receive":29,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/quote.jpg","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/quote.jpg HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 122423\r\nlast-modified: Sat, 16 Mar 2024 13:23:46 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2020:05:16 17:06:07], progressive, precision 8, 553x219, components 3","md5":"e18240eabf60a392e6dcd94701d1d06c","sha1":"66dfae23cfe6655e544106d6bf5d609488b600ea","sha256":"2cb630546b2ea4538fbd99fd9ffb10c9a934a5555207be5128206786c23ad6df","sha512":"f54e8eed10f96f936961d69849fb6a1f2de5c2a73ac58f98dfd535ad8183f305ae08ca52ded724e800ab8916d111a1c0ed0a45fecfbf2afac3c70c93ab2e05de","ssdeep":"3072:y0e09x2N58BFIVlia9nv9UyiZjYra9lqddZekbkNA5k:ydsq8LIVliunv9di1YmMdd/b8","tlshash":"49c31216f7a26c13f4a2917980f8e7934b346fef17030e51b44e94007fb69a9dc6c296","first_seen":"2025-10-12T02:42:49.782136Z","last_seen":"2026-07-21T09:15:55.696806Z","times_seen":6,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/team1.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/team1.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 18782\r\nlast-modified: Sat, 16 Mar 2024 13:25:22 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18782,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 554x554, components 3","md5":"5aec134cd770dafa62c95e3a1bfabb16","sha1":"939b8dee0b854f9a53bc67b3f3ef4751845abf99","sha256":"54e4acc08981dc1017d875aa14ca36c6e7be6e7f14555d0a94a69572d084e943","sha512":"0072c776e9f477ad7b895cc52f352271ba69f3306747dbe6ad53b2e141203cfe1705bd5c5ea082129a0015a1f61b745ad0dfde71d206b2b87e61fedfcf926339","ssdeep":"384:p5qqxfgS2cCQUmer1Em+8qkKbpHBC8KyPRXITbuU9+AN:p5TY+qKX8qkopHvRXybxIAN","tlshash":"3f82cf927b245a45d6b3d3f06e5e8956d3ea9c26b4054a8fe83890ad24ef5f0b0889d0","first_seen":"2026-01-23T14:03:31.351742Z","last_seen":"2026-07-21T09:15:55.699806Z","times_seen":4,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css/style.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css/style.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":3579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T19:51:41.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; expires=Wed, 28 Jan 2026 21:51:42 GMT; Max-Age=7200; path=/; samesite=lax\ncapital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D; expires=Wed, 28 Jan 2026 21:51:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"Flat UI","description":"","website":"https://designmodo.github.io/Flat-UI/","common_platform_enumeration":"","icon":"Flat UI.png","categories":["UI frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":92792,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (749)","md5":"02b9b1f87b6ca44356cce31c3feeee5d","sha1":"c3deaba401d8ae4ebdf35c30fd45e925dafcd60d","sha256":"26c9bf9921064f6235bea3bdd70fa32d44cd9d6268058134e886357fef5d034b","sha512":"3cbdf537a49e75e54617ef7510dac5324a4109b9b744a1f1e8c4527d3db0e16e280dbfc1d899755594f6ad5bb7a3366c9bf14b4e43d319d45ec426d1e8db21bc","ssdeep":"1536:5CIR9Xt0BBofMD0cRSlowN51XbSIpYS3vfCrtbsbuQvEu1dPNf0l:5DDXt0BBofM9SlowN51XbXpYS3vfCrtB","tlshash":"33934c2958f2102301c2d4d27e316b6b6f95e607da1b7a0476fc0bd85fe3d8adc13a5a","first_seen":"2026-01-28T19:52:13.535896Z","last_seen":"2026-07-21T09:15:55.692526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1270,"timings":{"blocked":172,"dns":0,"connect":54,"send":0,"wait":926,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/gsap/1.17.0/TweenMax.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /ajax/libs/gsap/1.17.0/TweenMax.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:25:54 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":104797,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32187)","md5":"1d4514e6131e1758432e33301e4bf1a4","sha1":"5688a393d466bde24928dba3d54eccdfb023cc7f","sha256":"1a324ffab8426503c882cf1903c87537fb3fd0ba84482d24798a795e3927b6ee","sha512":"8f3ef620445cf27cde8ec598bd45a8a022341a5a5ab2fcb7d2feea216d24740ccec359b4da3309c99a77bfaa1b249cdaeeaf08add60ab2ceeb028675ba7237da","ssdeep":"1536:j8NGGVFRbwfv8nhUMJgP/x5PCfCogP7bJEdUNqCPK+5E144D:jVGVPbwfiOv/x90Cty/B+ODD","tlshash":"27a3f8ca72117011459721d6557f0a43b33799a9b40e8a2cf259c5cf3e2caca22fbf76","first_seen":"2023-03-07T01:18:41Z","last_seen":"2026-07-22T05:19:12.545083Z","times_seen":486,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/calculator.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/calculator.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:10 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bad3db652edaa7bd62a1ccff896e2e08","sha1":"f129700cb56d7ffbb03d46804277c5658d9cc30f","sha256":"2ada0d802ea8203593af02a599367393b9e83d0c82d89e5046adc434b40aa0d1","sha512":"acfd9cbe837b6dc203375e0e4dc2c32cbb8868e54635f04db2727111fcae3ea9643fb392e6eed5decb05ab1adb1dcdc44d4d455a19d83bf93f2ced762cbf04de","ssdeep":"","tlshash":"f841489f7e8f21d401d48027a53616b0ed3dc1368406ae53fcc3da68f4d51a796a1f8e","first_seen":"2025-10-12T02:42:49.795481Z","last_seen":"2026-07-21T09:15:55.738249Z","times_seen":17,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/script/widget/config/4NFdZwE5iJ","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /script/widget/config/4NFdZwE5iJ HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2976ee0ec938130ca26644bdc7bcf4fc","sha1":"39d1d5257ec805a141be43ad3ca578089c539435","sha256":"71063c6cb814833c5acded5fb88f5f69a18b571a9bf51505a7c208d5507efffd","sha512":"5abe0ea7bfcae38273fd1e819fccd151ba550af508fc64e401ef0a6b1802f1391513549da2cacd7d6f84d3db6a18688493355cc0cbd5324dcd164e81c9a50abf","ssdeep":"","tlshash":"4221f17bd1c118528241901474493609ed8ac91fce7e8a10b8ff4c59bf87997d8b391c","first_seen":"2026-01-28T19:52:13.461341Z","last_seen":"2026-07-21T09:15:55.677986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/css2-1.html.css","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /css2-1.html.css HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:23:40 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6c6cb6a3bb415df4a14ef3f03fb8eb32","sha1":"3ea555d5da2e75ddccaa7430f54373cf2412a3ef","sha256":"b7c8347dc395589f7b698afd548f5a96ca0e9f4adfb107f84295670fd6e55806","sha512":"f4f8762a93391041b7bb42b89daa0e755e3b3189ea05a6db398c89a9b127155d537b7c4ae18feb1698f2cff4a31a67ac23aa27bc6e6f71ad1be596f59a5db4df","ssdeep":"","tlshash":"2901a70161096621e2101c9e33db7e39ce8d346621b6c02d6b786c34bfe5c2a07a2fbd","first_seen":"2026-01-23T14:03:31.354668Z","last_seen":"2026-07-21T09:15:55.671418Z","times_seen":4,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/js/fake-notification-min.html","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /js/fake-notification-min.html HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":4666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/team2.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/team2.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 220573\r\nlast-modified: Sat, 16 Mar 2024 13:25:24 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":220573,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1501x1201, components 3","md5":"f2b09dd5e6bb2a94dc9bdc05a2ac5f27","sha1":"535d5b72ed88d9aea1c246835d8fb27b95fb86fa","sha256":"9d351b38f962216705b8632312a22a9e06c203cf37f0bbae629586f211b945a1","sha512":"99db4e4a9e6cada8bd74ed46275cdf09d18a98b9c19dd9e7e68359fa82857940706bc9e3e1f339a25c97dac40a7e7329430f4f2b94f67ad9d20a9cd587dc77b9","ssdeep":"3072:KwDJbi1wEARr3TK8z6Fps0RmHpYEuRxN7kjaBCusZWi8PtirmJdg7m9w:RDJGwEAEvs0EHuRPB0eFirmz9w","tlshash":"092423e71b431c91c985563f00cbdb349ef4e83c86fb62a929263938d9e719839444fb","first_seen":"2026-01-23T14:03:31.32419Z","last_seen":"2026-07-21T09:15:55.700712Z","times_seen":5,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/img/home-one/1.png","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/img/home-one/1.png HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 78359\r\nlast-modified: Sat, 16 Mar 2024 13:25:30 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 534, 8-bit/color RGBA, non-interlaced","md5":"8eec8f7087609742296fb2147f9bed9f","sha1":"5c67a52e5d319359073099255aa6ddbbbf8f4462","sha256":"32198b13d6152b0620fc7691dc634d70f5e01d4465ddcbb589c4cc18ae4559e8","sha512":"b406a55a1d5b395ad79e8f12c251bdad89160029dcff9ee303e58b22b8e320a3fd0e71294669adb31c5aa1a095940e7b25c31e2d67d6f076373a2b34d9bb8303","ssdeep":"1536:bUttACvz9eAlJpwPVe8pXd0G8Vq9cHcx/S6uLOgxnZ3iUur:wt6CvpeewPVe8juq9soq5LZ9ZSj","tlshash":"7773f162eef0f989854b9536087c74c80e67a4bf82666cc8b7ed04269f59f1c8d097d8","first_seen":"2026-01-23T14:03:31.319041Z","last_seen":"2026-07-21T09:15:55.703006Z","times_seen":4,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/assets/js/form-validator.min.js","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /assets/js/form-validator.min.js HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Mar 2024 13:26:08 GMT\r\nexpires: Fri, 27 Feb 2026 19:51:42 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6055,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862)","md5":"81df0465f243a2e7b7b06b8ad6015173","sha1":"996eb26bb4bdb44ed5257d048cedaf3ed0a6f90c","sha256":"c31a654938abf168fca328d9663ea83999b87ff36d18b016ea8aace1a9cb2cb1","sha512":"80d479d6816cbebc780d89d37bdff0316f731c18e220042b63014875508b942699567271bdcde224f81ad07c31e7febac8e156249dc1217f5b5fac255679db73","ssdeep":"96:CFMhGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:CFMh+U563CvzugvXdfZUopjkunosfR+W","tlshash":"b3c12449366321921f9234f5419b838b72b97b3cc50a409435ea84f1aaf8fc567f7b39","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-24T02:03:02.434398Z","times_seen":1592,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/fonts/lato/lato-regular.woff","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:43.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /ajax/libs/flat-ui/2.3.0/fonts/lato/lato-regular.woff HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/ajax/libs/flat-ui/2.3.0/css/flat-ui.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35464\r\nlast-modified: Sat, 16 Mar 2024 13:24:46 GMT\r\nexpires: Sun, 29 Mar 2026 19:51:42 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35464,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35464, version 1.0","md5":"27faf19206c7a20e8126bedc37c95458","sha1":"d9eff7656807f97d427ce73adf2d3ef83a495bd9","sha256":"7e14b4e3561f0efd6d6f15d4ee390287527fdc30748a0c562f1bccd485464f3a","sha512":"e7484f0e5efe0277e48f6074ed166590ef3485159eaab4252b9151db0da09b172d490c3e8491ccb676994b547dad2dcc369c24c79880780b5c08a008f32f934f","ssdeep":"768:utFe23P2TQCyVH/aHtAAUwHwgyRaG2pPY4bJGna:oeI6/yVHiHthQ/aRH","tlshash":"40f2f2d2750ac807b3e3377346a89f9591a1b893f14f0712c4b5237e6862a26d3778a9","first_seen":"2023-04-10T18:41:17Z","last_seen":"2026-07-21T09:15:55.721798Z","times_seen":1686,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalaccessreturns.com/styles/css/main8ab2.html?v=%22%20+%20Date.now()%20+%20%22","fqdn":"capitalaccessreturns.com","domain":"capitalaccessreturns.com","tld":"com"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalaccessreturns.com/","date":"2026-01-28T19:51:47.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.capitalaccessreturns.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Jan 2026 10:58:15 GMT","end":"Wed, 22 Apr 2026 10:58:14 GMT"},"fingerprint":{"sha1":"F7:9F:D4:A3:8B:30:4A:2E:F4:01:E2:ED:DD:53:59:B0:74:0E:3B:66","sha256":"EF:B5:66:F7:1C:D3:BA:B6:ED:0E:B6:41:CF:19:9D:CC:80:3D:3F:0A:FC:8D:E3:EE:16:AC:6A:6F:98:39:2A:68"}}},"request":{"raw":"GET /styles/css/main8ab2.html?v=%22%20+%20Date.now()%20+%20%22 HTTP/1.1\r\nHost: capitalaccessreturns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capitalaccessreturns.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlN5NkQ0RytOR2lITUhpcE93cDBITkE9PSIsInZhbHVlIjoiMjh0RGQ5dW5LTTlqaG9NVThoUFQ1cFBIK3o4YTlna0RSTlFIdEJOSVp0em1ST2toTE5CYzczQmNtN3B1QTgzQWFDV0pkdm9XR2tKT3lvSko2REhPUjN0MDBsTTM0aDFOemxmeXhxSGNycmNkZzQ4QTlOSFRMUWtIVGlxRStGdGUiLCJtYWMiOiJhM2U3MjM3MjkyYzc2NmMxMjlmMGEyMGVjMjBlOTRjZGU0MmU0NmM4ZjYzZWFkNDdjMTlhYzQwZjMzM2Q5YTlkIiwidGFnIjoiIn0%3D; capital_session=eyJpdiI6IjdqcDF2NGVsc2FnS3ZTWHErVUJSa2c9PSIsInZhbHVlIjoicUZTK2p2L0g1U2FTV241NjMydU5Ndlg4eTFMTitEV1ZIb3VmSUYvdjhNWEJUaVNiMnlDU21hbk04SCtaYWl3RGhPNEIwd0lwMjd5dUZNNDR5VFlneTBIM2pUZFRrYjZrVllKSHlFRTladTE0Z096RE94SDVhZ3Z0TVBOOC9iSzUiLCJtYWMiOiI5YjI0MDFkNjU2ZTY5OWQ1YjVmMTk4ODM0N2NiOWNlYWY5M2M3ZDY0YjYzZTFiNTkwYjhkNzEwNzQwZWMyNDk2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 28 Jan 2026 19:51:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.1.22\r\ncache-control: no-cache, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.1.22","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":1435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"capitalaccessreturns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}