{"report_id":"4dcab70d-02b8-4ed5-8285-f4743e93d2ac","version":0,"status":"done","tags":[],"date":"2026-08-30T02:57:06Z","url":{"schema":"http","addr":"visitalcapital.com/","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":0,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"visitalcapital.com/","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"title":"visital capital Bank","dom":{"size":16348,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a70dda9a18d186f2e2b69a8e707787dc","sha1":"26c414b76ee934807fb2922f1a55d724d7f70c1b","sha256":"e8199efd9da2ea630e203e402df2f07578d6bce61904ba58fe122275987d1614","sha512":"1acf2c7770de2fd0b6fa8c670a2fb9a5d1e9a5203e593ce9ed8bf50de81c58308a1f85dfe520f6770e56442364448d56cdee05b8dc3b1f1600fea8ffdd368e07","ssdeep":"192:dgya7t1TU3O6Tdu2wGzx8avhvKzFfkPQ2iYAR6HW/prnxuEfF82vW8yJAjq7dwCR:f2996BWvw","tlshash":"4872b70949e312006447a4a96feb67166774c007dd0ecc2d7aef7798cf8a3495ae3f98","dom_hash":"domhashe9c01168290024c128a6f03a43c4ce75","first_seen":"2026-08-30T02:57:10.945666Z","last_seen":"2026-08-30T02:57:10.945666Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"visitalcapital.com/","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":0,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T02:57:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"visitalcapital.com","ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":63,"request_count":63,"received_data":866314,"sent_data":78058,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":3,"received_data":105430,"sent_data":1743,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-08-28T05:43:07.341812Z","alert_count":0,"request_count":1,"received_data":23849,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":581,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/parallax.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.593Z","timestamp":1788058591593,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/parallax.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:40 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13302\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13302,"size_decoded":13551,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611), with CRLF line terminators","md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-30T04:54:51.73492Z","times_seen":367,"resource_available":true,"data":null}},"time_used":8998,"timings":{"blocked":8962,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/form-validator.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.595Z","timestamp":1788058591595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:41 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6063\r\nKeep-Alive: timeout=3, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":6311,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-30T06:28:19.701327Z","times_seen":1087,"resource_available":true,"data":null}},"time_used":9525,"timings":{"blocked":9494,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/mobile-app1.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.608Z","timestamp":1788058591608,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/mobile-app1.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-12.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.576Z","timestamp":1788058591576,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-12.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/wow.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.594Z","timestamp":1788058591594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/wow.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:41 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8183\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8183,"size_decoded":8431,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152), with CRLF line terminators","md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-30T04:54:51.777285Z","times_seen":2657,"resource_available":true,"data":null}},"time_used":9494,"timings":{"blocked":8998,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/main-mobile.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.610Z","timestamp":1788058591610,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/main-mobile.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/animate.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.311Z","timestamp":1788058591311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/animate.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 71756\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71756,"size_decoded":71999,"mime_type":"text/css","magic":"ASCII text, with very long lines (65342), with CRLF line terminators","md5":"b3d5b75898f1ed885c7d2b538faa8b81","sha1":"bc96496831f4df311443b8e3d76cfc17db53a988","sha256":"a61e123314188bd0453320008e01b4bbb665bee09039f4cbd9bef44de410ce67","sha512":"be097927cb6f3c12ee4140a60f11dd56bcb1e8661b35848f25f1ae2417b65190924d73d2d01c04c6763fc2c50d3931cddbc2aa74cd945f84145d3f3fe451f433","ssdeep":"1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"006329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-30T06:25:31.391788Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":29,"receive":126,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/style.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.327Z","timestamp":1788058591327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 155715\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":155715,"size_decoded":155958,"mime_type":"text/css","magic":"ASCII text","md5":"2f48d50b42acdcffe5d9e5fd20b7237c","sha1":"ba0cb591de881029a3a36f0630b5133dfd90ccac","sha256":"4655f9d69b73295f521d26f7339aa565b0d235304823c167efb7d624d22047c8","sha512":"32559c77b3f9d5104f47e9a7bca65845476d725951ef54c603ee8daa9ffbb5a444c5c0afd826b57e610d64f8c14bc3ef3ad5637e986207559af340b8d05da783","ssdeep":"3072:m2KQRe5PUk06PSEnZB8BcgSS3ZQhqLpDpViAnL2Moc2S0YWHZj5JOQ9ZBbqcVNyA:iIe5Pf06VWc+3ZztFL2MP2PlHZmQ9PFH","tlshash":"4ce385d55ba52144364f90a829e5eb142fad50c3ea4fcdb97af3604cbf843881167f1e","first_seen":"2025-03-07T12:16:50.182098Z","last_seen":"2026-08-30T04:54:42.420174Z","times_seen":313,"resource_available":false,"data":null}},"time_used":26955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":26927,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-8.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.572Z","timestamp":1788058591572,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-8.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/meanmenu.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.324Z","timestamp":1788058591324,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/meanmenu.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3151\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3151,"size_decoded":3392,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93fae0ffb1b096b0233875f166557866","sha1":"f49ed4ded57ffc6bdef92496e2a6e35cc77a2c71","sha256":"3886b107ba24c98a804e32fc22b2751b84e0b40acdf33a32142902ce076fc045","sha512":"61174a758227ac8950578feacfbd6906b1dd1c8981585800b4b98cf27d08f8929461207428576479fbc445925b57baaff3fab18a92d86f493dcfc2969727de51","ssdeep":"","tlshash":"cb51ac54da7b1099fbab967ce671d3287ee4b05baf0fc1acb4fce520c28435824611c9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.74458Z","times_seen":607,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/circle1.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.563Z","timestamp":1788058591563,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle1.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-4.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.569Z","timestamp":1788058591569,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-4.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-5.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.569Z","timestamp":1788058591569,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-5.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-7.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.571Z","timestamp":1788058591571,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-7.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-11.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.575Z","timestamp":1788058591575,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-11.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.585Z","timestamp":1788058591585,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:32 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 78085\r\nKeep-Alive: timeout=3, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":78334,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-30T04:54:51.764102Z","times_seen":3301,"resource_available":true,"data":null}},"time_used":16566,"timings":{"blocked":585,"dns":0,"connect":0,"send":0,"wait":54,"receive":15927,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/nice-select.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.587Z","timestamp":1788058591587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/nice-select.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:35 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2937\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":3185,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822), with CRLF line terminators","md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.780871Z","times_seen":610,"resource_available":true,"data":null}},"time_used":4486,"timings":{"blocked":3944,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/map.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.565Z","timestamp":1788058591565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/map.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-1.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.566Z","timestamp":1788058591566,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-1.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-17.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.581Z","timestamp":1788058591581,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-17.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:58.425Z","timestamp":1788058618425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:56:58 GMT\r\ndate: Sun, 30 Aug 2026 02:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64800,"size_decoded":3062,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b0492055bb5b23c5ed11d557a9c290f","sha1":"26e59353da26632e9cdbddd804cb0f526f53fc00","sha256":"b56d6d4c80db94680717f75c471851d4ec67f81078099e54553046772b0f90a8","sha512":"d86e4e14d6f2cb643dbf842996ab4d78eee181f4fe7d3f0ef292798252541396c6806f76992a772a18258527a5c94e10eb7d802ec3bde489a72bcf50e5ee65c9","ssdeep":"768:yFdF9FAFNFgBFUKF7FnFwJpK5g9UEf7h4YXogEU9SWWjD8TgfUS9hMNtG9g5UoTV:wE9YIWHHIHTxj","tlshash":"83531da1041b5440ab834ce223ce7e35fe0f92547141d075ebfc9b6baedbda6526836c","first_seen":"2026-02-19T22:23:13.630851Z","last_seen":"2026-08-30T06:28:19.688691Z","times_seen":7300,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:58.427Z","timestamp":1788058618427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:56:58 GMT\r\ndate: Sun, 30 Aug 2026 02:56:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31212,"size_decoded":1689,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9308d064c8d95dd0d7f2b751df606c5","sha1":"697a5fcaaf26c9e959e578ef1483d9f096cea790","sha256":"eda15317dc0fa78f70e63940730f5e04d9a934951bbc55e3348ccbf6302aacca","sha512":"9c04884c77d7e5ffd39cd1a2508818e944e2d944821904f8a1df452e6ae993ce7505bc9901f6a42f64b788f7374b1a4fbdc98788b2b77449ee12f0bc65ae9124","ssdeep":"384:g3rw38T3z3M3dowhTCBERwmTx2nmwbTor2fwATXw5Mw1TGVQlwaT1ajKwvTs/yjp:UgYTgg2yr/F","tlshash":"28e2aca1091bd040ab476dc667cf3e36ee4e62147046993a9bfd58fcbca6d3613a070d","first_seen":"2025-09-10T18:04:04.291313Z","last_seen":"2026-08-30T06:00:41.304075Z","times_seen":2706,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/flaticon.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.315Z","timestamp":1788058591315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1569\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1569,"size_decoded":1811,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b685b2dfd3cfb19626146177d1c95e5","sha1":"f195ad890dd1d507d2fab849448e9b737f9d6bbf","sha256":"909efd0a62bbc415e927346844061afdedd751683b6eba7142b1db3bb72ea18c","sha512":"621b491a8b01a066a23630a90ebb71fbaa89c6d10dc9581064a548f82f2c467c5b4a47237a829d4ac375ae049c47f571b96d494124d5fe314f7c565b39189ade","ssdeep":"","tlshash":"4e31e6e9c12e10818712af45e7abb6d0af48b02c99c09d1ae1751d9dfef1e35878279c","first_seen":"2025-04-09T11:54:58.551863Z","last_seen":"2026-08-30T04:54:51.763165Z","times_seen":328,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":30,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/responsive.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.328Z","timestamp":1788058591328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 42016\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42016,"size_decoded":42258,"mime_type":"text/css","magic":"ASCII text","md5":"0c84a81a7dee675b6713af510b5725d8","sha1":"2ebb9bb229c01f940e0506c8d260947d9c48a996","sha256":"7b7658d6d943c42439e53284af5caef22a924806eba3501e6c0b11b88aa8a2fe","sha512":"c2c0b2cd39d3e338d5a56c5e5d9f26708341e44e6f7a7080db61814418971e4a0bbcf72ad786a7d1178aca1cd0443ee77207bf95f1120dde48b9106b5a397cfb","ssdeep":"768:88wvXFz1EdMOnP6FeVFMF530Cbms3LWg+6O2HFzR:88wvXF1EdlP6UVC7bms3Cg+6O2HVR","tlshash":"d713989f7aa3110c786aa6b96abd3a12b745d453d38edce379c4206ccfd46d00ad274c","first_seen":"2024-08-29T17:20:29.816202Z","last_seen":"2026-08-30T04:54:42.434651Z","times_seen":336,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.527Z","timestamp":1788058591527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.2.33\r\nCache-Control: no-cache, private\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":937,"size_decoded":1199,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"0da96ff8a5397c73a76af54dbb2137e0","sha1":"9d810c50c7b54f8aca5affdb41eacf3aacf18701","sha256":"937680c7c4fea2f59afd2bfa3768d13d0e89263342c3cd77407d1dd150b1a8fe","sha512":"3755e22a4baf6089cc16979023412901a2c764b515d541501924ed7dab7f1b5127d1898592db387f80fad40e5b4d78018e4648b608fbd3097d6a25e84d9fe233","ssdeep":"","tlshash":"4d11637f44950a7e120085a2701b332cc0cfff2a6e826850e0e304e67be5bc9e47d09c","first_seen":"2026-08-30T02:13:34.260586Z","last_seen":"2026-08-30T02:57:10.968919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/4.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.561Z","timestamp":1788058591561,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/4.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-3.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.568Z","timestamp":1788058591568,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-3.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-6.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.570Z","timestamp":1788058591570,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-6.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/mobile-app2.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.609Z","timestamp":1788058591609,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/mobile-app2.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.309Z","timestamp":1788058591309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 163862\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.322Z","timestamp":1788058591322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3358\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3358,"size_decoded":3599,"mime_type":"text/css","magic":"ASCII text, with very long lines (3186), with CRLF line terminators","md5":"f999392859d1b921f83a84adb77be572","sha1":"1cd09814267e2033eab27dac1a594e80e647c212","sha256":"4c04da57afb7c99fe3485be1e8a53273116dfd3043a504f94222a89aea345136","sha512":"ad5bf8feb977b794d2dc5d18f69e9d55ac84549b2ad3f0e71be46dd2e1f9b1b72c4b037acb7c311d41bb2a8d18ecc470c5f55e505cb6fc93d9336aea77b84dde","ssdeep":"","tlshash":"e761cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.767097Z","times_seen":760,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/storage/app/public/photos/CS6Y4JijkgoXvgnpd4o6BrcjGDf6mHOAOAu5pRjy.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.554Z","timestamp":1788058591554,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/app/public/photos/CS6Y4JijkgoXvgnpd4o6BrcjGDf6mHOAOAu5pRjy.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-14.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.578Z","timestamp":1788058591578,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-14.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-16.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.580Z","timestamp":1788058591580,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-16.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/meanmenu.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.587Z","timestamp":1788058591587,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/meanmenu.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:35 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6035\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6035,"size_decoded":6283,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397), with CRLF line terminators","md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.770277Z","times_seen":619,"resource_available":true,"data":null}},"time_used":3944,"timings":{"blocked":3883,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/main.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.597Z","timestamp":1788058591597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:41 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5916\r\nKeep-Alive: timeout=3, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5916,"size_decoded":6164,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-30T04:54:51.771254Z","times_seen":337,"resource_available":true,"data":null}},"time_used":9780,"timings":{"blocked":9636,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/nice-select.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.319Z","timestamp":1788058591319,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/nice-select.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3185\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3185,"size_decoded":3427,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3070), with CRLF line terminators","md5":"573b75cc4e984f9fd2d7f0bfdef2eed4","sha1":"318d8e184c0b00ea15e324fd3b564ea7912cd7b8","sha256":"d8ba2f0d8e2516ee382a764e506ab91b4b1b02c8078bac475b10aa2d83494529","sha512":"47a28314bf50043971d2d62fadf7c1478cf2195b0c4dcee1e7417cd078bcb97b4bf9f125ffccbfd73cee763ecbdd0cc79281ff488a058b760b413e58fe052f5c","ssdeep":"","tlshash":"cd610f35d551216ff07fca3bbec53b68243dd20368324a9ef244ea07834a16998ce70b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.754808Z","times_seen":585,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":30,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/owl.theme.default.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.323Z","timestamp":1788058591323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1019\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1019,"size_decoded":1260,"mime_type":"text/css","magic":"ASCII text, with very long lines (847), with CRLF line terminators","md5":"f13c9109b79ef93c06e22c3542625b72","sha1":"424a8746184ae7d2be69197cfd9b3c4032238837","sha256":"33dbcf6a027199fab7bca71ce31c80154051a658f69ef98e7ddad581fefae1aa","sha512":"7cd94029c79a246846c89dfa82244334fbe284d86863989d69dd96d54f9d9c33231d8048f647a7a9c94810ea8b618314dd579a528ae2f9461f290490434a10c4","ssdeep":"","tlshash":"5b11abc5b189221d3023c18046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.751258Z","times_seen":1054,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-9.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.573Z","timestamp":1788058591573,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-9.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/magnific-popup.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.590Z","timestamp":1788058591590,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:40 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 20219\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":20469,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-30T05:29:15.275592Z","times_seen":25399,"resource_available":true,"data":null}},"time_used":8820,"timings":{"blocked":8707,"dns":0,"connect":25,"send":0,"wait":32,"receive":25,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/slick.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.588Z","timestamp":1788058591588,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/slick.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:36 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 50674\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50674,"size_decoded":50923,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2614), with CRLF line terminators","md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.787594Z","times_seen":719,"resource_available":true,"data":null}},"time_used":21306,"timings":{"blocked":4487,"dns":0,"connect":0,"send":0,"wait":4391,"receive":12428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.599Z","timestamp":1788058591599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:56:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 22:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 26 Aug 2027 15:24:19 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGA1E5ojT1eRlxAxAl5s80Je0TTC51hl6Z1luuI2r0UqUy%2BdvgWm6yfQwS3Ida8EKB5H8TsIjlGkt3VHpbj%2BTQQfTuD2x4NsOjiePeMjAcPrahZ5VrXTNWE5GTsDQbF9xDK8kg%3D%3D\"}]}\r\nage: 300732\r\ncf-cache-status: HIT\r\netag: W/\"6a8780ea-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a33085d59993b512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7502,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-30T06:25:07.351712Z","times_seen":2653,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.525Z","timestamp":1788058591525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:56:31 GMT\r\ndate: Sun, 30 Aug 2026 02:56:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":1343,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d34c4709c845524ede56493d18bcbd6a","sha1":"9dc8b77976303bb765dd43925d29969e3b78548a","sha256":"462943911a79d4366ed009b4c2a87bdfd0d12a1d2c836cc5227192f8b5d71d86","sha512":"e3e0a30a216744a6a359dcdce1915cc4260c00f68f6ce2821285cd575db394a3a353c48732f66527071ac0bea7e8eb820440faea02f3f9e98e3feb642352f36f","ssdeep":"192:cG8Kt8Khj8K+88x8IF8sD8r8zm8ZwD+rw8+Owl+NwG+3:cfKuK+K+5y9s4grNis+3","tlshash":"41e1dd90047ba510eb971dc526cebe33ee4e61547454d878affe1888fcaec291362b4d","first_seen":"2025-10-26T02:17:19.355688Z","last_seen":"2026-08-30T04:54:51.755562Z","times_seen":163,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/contact-form-script.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.596Z","timestamp":1788058591596,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:41 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2144\r\nKeep-Alive: timeout=3, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2144,"size_decoded":2392,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-30T04:54:51.758151Z","times_seen":351,"resource_available":true,"data":null}},"time_used":9635,"timings":{"blocked":9525,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/storage/app/public/photos/OA3r6XjUO4dG7B0qchhZ3PBfW2OT6sx0CXY4DDb6.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:46.039Z","timestamp":1788058606039,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /storage/app/public/photos/OA3r6XjUO4dG7B0qchhZ3PBfW2OT6sx0CXY4DDb6.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/fontawesome.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.312Z","timestamp":1788058591312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 89166\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89166,"size_decoded":89409,"mime_type":"text/css","magic":"ASCII text, with very long lines (65312), with CRLF line terminators","md5":"c858b27aa3346543c8a9fa0e8e48bf96","sha1":"682d2201ea724790a5216a74690362a32c201126","sha256":"51378e1e8afaf0d01dacb6da2997f918193e39ca0dfbf27b3d2bee66274403c9","sha512":"c28ffb3fc229404e589944c31aedbad4f453efc3e119531ace0eade726fc61460d68ac4272c717d81f18031d938a2688be7c8e15cc4ab77e42a00766a9682923","ssdeep":"1536:KbMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IVVUHsR+v:cd1NY95IVVUMR+v","tlshash":"5193a9e9e04c05d56732c44baf99b37c65b6f73cd5810da9f02f580c1ad26a822c6f7a","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.785855Z","times_seen":593,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":29,"receive":151,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/main-banner2.jpg","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.555Z","timestamp":1788058591555,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/main-banner2.jpg HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/1.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.556Z","timestamp":1788058591556,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/1.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/circle2.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.564Z","timestamp":1788058591564,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle2.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-10.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.574Z","timestamp":1788058591574,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-10.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/jquery.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.584Z","timestamp":1788058591584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 89501\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":89750,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-30T06:28:19.846018Z","times_seen":11194,"resource_available":true,"data":null}},"time_used":29624,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":34,"receive":29313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/odometer.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.326Z","timestamp":1788058591326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3274\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3274,"size_decoded":3515,"mime_type":"text/css","magic":"ASCII text, with very long lines (3251), with CRLF line terminators","md5":"33857183503886a3ea32dd5f475ed489","sha1":"6a702c75c57ee5cd30c4fa6fd22a6e5ce19ee58a","sha256":"53c8d41573daafb7177733ea705128818a28503ddc9bfc261a9988199b6069c6","sha512":"5800187f2f7656cee966134f8c67c75004a533403f4ceef58b053be20e912765bd1f2b65f68b3c9c0ef303b5511c1ccc2d9ab12d399f1103d6fa0be716c7bea2","ssdeep":"","tlshash":"4e61f5154f90036863367506bac81760befce9515123e98eb35ea54bcf43db9e398b0b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.740603Z","times_seen":772,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/3.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.560Z","timestamp":1788058591560,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/3.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-15.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.579Z","timestamp":1788058591579,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-15.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/odometer.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.591Z","timestamp":1788058591591,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:40 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10264\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":10513,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-30T06:28:56.79227Z","times_seen":3538,"resource_available":true,"data":null}},"time_used":8855,"timings":{"blocked":8821,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.592Z","timestamp":1788058591592,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:40 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 44350\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":44350,"size_decoded":44599,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998), with CRLF line terminators","md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-30T04:54:51.732838Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":8962,"timings":{"blocked":8856,"dns":0,"connect":0,"send":0,"wait":30,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T02:56:29.492Z","timestamp":1788058589492,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:30 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.2.33\r\nCache-Control: no-cache, private\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:56:31 GMT; Max-Age=7200000; path=/; samesite=lax\nvisitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:56:31 GMT; Max-Age=7200000; path=/; httponly; samesite=lax\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-11-21T10:56:31Z","raw_expires":"Sat, 21-Nov-2026 10:56:31 GMT","max_age":7200000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:56:31 GMT; Max-Age=7200000; path=/; samesite=lax"},{"name":"visitalcapitalbank_session","value":"eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-11-21T10:56:31Z","raw_expires":"Sat, 21-Nov-2026 10:56:31 GMT","max_age":7200000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:56:31 GMT; Max-Age=7200000; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":99618,"size_decoded":100777,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379), with CRLF line terminators","md5":"f15b19429eb3aead2ac1299999a3e712","sha1":"2171dc41d924ae411f98c4216cb1a44442f35b28","sha256":"590b1aded1aaf065d191d0be593f4bf06247f8a1116871453cfd2ca7943d0a1a","sha512":"0baf15d73e28183189b0107ae1dba328c7f28f733e2b34be0cfd16fff1b8aae69b62aa9be3123b9d5c6c85de91cd40e3b9879723c92a2de7911f1923d886a3d3","ssdeep":"1536:flF3pPMFEPX63cftjJ47mlbKIhFm7Ep/uGK0AM/QTUI:fHFER","tlshash":"bba3545541c4110550b3d2a4fea28b49fb748107c38b456c7bbe3ae36f7ec689637ab8","first_seen":"2026-08-30T02:13:34.228607Z","last_seen":"2026-08-30T02:57:10.998721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1792,"timings":{"blocked":0,"dns":640,"connect":25,"send":0,"wait":917,"receive":178,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/dark-style.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.523Z","timestamp":1788058591523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-style.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 38764\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":38764,"size_decoded":39006,"mime_type":"text/css","magic":"ASCII text, with very long lines (1191)","md5":"8c1ac4fa64c95a86f75e12ed2d732159","sha1":"7ebcbde56a39fae94bb808f1fdae5c0fa6348539","sha256":"193fd9dfc7b3b076646a4efbf74285486c93cc56f7b1f48ab083ff11400ecee6","sha512":"c3931898c92663a481cb0dc0fa8f2386288bcdd96ce0fb96198c872a64c7c9baf576efe6594b2510c2a2a6fcfe2c4b08c50c09fa24c1e7de50d3767447643a81","ssdeep":"768:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GurcaqI0oUIvkxvXpBANLbERP3gtr7kxvX7:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GuU","tlshash":"0e03168599fbad5015d3041c79c8ce601ffa62d0572cf3bf793781acaa8660c12baf59","first_seen":"2025-03-07T12:16:50.258205Z","last_seen":"2026-08-30T04:54:42.429658Z","times_seen":326,"resource_available":false,"data":null}},"time_used":8771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2117,"receive":6654,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/magnific-popup.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.317Z","timestamp":1788058591317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:35 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5259\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":5501,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-30T05:22:56.312496Z","times_seen":5476,"resource_available":false,"data":null}},"time_used":4176,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":476,"receive":0,"ssl":3671},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/circle.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.557Z","timestamp":1788058591557,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/circle.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/1.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.558Z","timestamp":1788058591558,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/1.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/2.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.559Z","timestamp":1788058591559,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/2.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-18.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.582Z","timestamp":1788058591582,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-18.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:57:04.035Z","timestamp":1788058624035,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://visitalcapital.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/css/slick.min.css","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"77.90.50.86","port":443,"asn":197477,"as":"Nerdscave","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.320Z","timestamp":1788058591320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"visitalcapital.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 08:50:53 GMT","end":"Thu, 26 Nov 2026 08:50:52 GMT"},"fingerprint":{"sha1":"68:7D:A3:0D:6D:5B:6B:D2:D6:70:28:03:CE:A8:81:0C:0C:F9:05:99","sha256":"7C:9E:4D:28:7D:91:66:56:02:7D:36:50:EC:B6:79:7B:D1:0F:50:2A:EF:47:AB:52:FC:C4:1A:06:BA:D9:5F:D1"}}},"request":{"raw":"GET /temp/custom/assets/css/slick.min.css HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 30 Aug 2026 02:56:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 03 Oct 2024 07:14:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1814\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1814,"size_decoded":2055,"mime_type":"text/css","magic":"ASCII text, with very long lines (1332), with CRLF line terminators","md5":"e1bb8aca0ada1361d15eac06412538b4","sha1":"51f8be05d8b482766bbe8550181ee66b95a1a10f","sha256":"6c3b07b65a2bae0d0b8430524dbcffac75c20125514b04dbe5ebb48faca4df64","sha512":"9a1120caca16be2f5e6bd422a569e1042b81948f15a36d85fa41508773ff93f938deb8594d1d02b922cf4292378e8a06255a3c3b3b36cbb8683a83154ca9a079","ssdeep":"","tlshash":"8a31eb990056118a4037e7136ae3eb8a39e7f1125c3206c9f75c8715cf8feda1dc25da","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.743417Z","times_seen":710,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/invoicing-image/main-pic.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.562Z","timestamp":1788058591562,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/main-pic.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-2.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.567Z","timestamp":1788058591567,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-2.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitalcapital.com/temp/custom/assets/img/partner-image/partner-13.png","fqdn":"visitalcapital.com","domain":"visitalcapital.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://visitalcapital.com/","date":"2026-08-30T02:56:31.577Z","timestamp":1788058591577,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-13.png HTTP/1.1\r\nHost: visitalcapital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://visitalcapital.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InNDL05EU0JldVp1a1JDaGpINEhBMVE9PSIsInZhbHVlIjoid2RJcEhGeUxaQWdieVhLeW82eXY0V2xrbnFpdlJaQVo3bkZsdy9yWmJhNFlreWZ2WGU2cmVhVVFwTXRidWtUd09ZcVFSZmFXRnRMSjdpT25aYVc2TlIxVjFsRlQ2MTBrWXlTb1k2WUc0c0R4WkNHb2JodzVsdmtDckpVbEM2czciLCJtYWMiOiI4ZTdlNGY0M2QzNTZiY2M0MzAzMjE4NDEzZDljZWUwN2FkMTg2MDAyZmQ4OWViYzk2MDA0YmQ2OTQyYmY0ZWE3IiwidGFnIjoiIn0%3D; visitalcapitalbank_session=eyJpdiI6IjNiMURvbkZ4ZDZ3dFpXaEpTZUpSYnc9PSIsInZhbHVlIjoibmNtTy9KMmNNVmhrcCtaT1VDdEZqdms3czNidEVIT0hwL3l6emJXRWRZdWIxT1AybitWYXYxdWFmWDBjaFVuM0VTN044cWJXYkZzRlhwY0w0dU5TM21iOXR2MEJ4UHVtbTcrb2xZUjlESUVDaEY5RDZmZXVVZ3NCMDNyYmxYZi8iLCJtYWMiOiI5MTU4YTcyZjk2NTIzODQzZjU2MmM5MTEyYzM4M2EwMGJlZWYwMTQ3YjAxODU5ODA3ZmEwYjdlZTNjY2U0ZjI0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T07:22:59.116759Z","times_seen":18181253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"visitalcapital.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}