{"report_id":"6f9686c0-2c97-44b4-b7e1-79debe19f111","version":0,"status":"done","tags":[],"date":"2026-09-30T18:22:38Z","url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"title":"crownspring-capitals.ltd","dom":{"size":1482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (422)","md5":"e081899fc6979f3692c099b2f3dec275","sha1":"55d7aed3c3963dce371e0fed1620f5a5f2ed253b","sha256":"1ddd014a85578e1bb2a2a615e147d64ceca445b57acf0bccbe83135669f4e622","sha512":"b38d152dc6ec6720e4cd636d083263f56de7b8debc532070ec9ee4a59d6f8f7d188b072217e5d980bc91533f0442fa521878911772e3a9a728882a094275a9ab","ssdeep":"","tlshash":"bc31f0a3f287684a7121c16090f5f2381f3b6189b7069d65b5307773bb89685e8b28e6","dom_hash":"domhash86da014b45e09612671eeb44e66037c6","first_seen":"2026-09-25T21:24:36.829047Z","last_seen":"2026-09-30T20:16:08.55691Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T18:22:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":4,"received_data":247268,"sent_data":2239,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":2,"received_data":56027,"sent_data":1121,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fx-rate.net","ip":{"addr":"104.26.4.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-01-16","domain_rank":255934,"first_seen":"2012-06-19T11:22:00Z","last_seen":"2026-09-30T18:20:21.164237Z","alert_count":0,"request_count":1,"received_data":22473,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bothelp.io","ip":{"addr":"130.193.41.152","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-11-11","domain_rank":187550,"first_seen":"2019-11-25T10:07:37Z","last_seen":"2026-09-30T18:20:21.020684Z","alert_count":0,"request_count":1,"received_data":90051,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-27T23:35:58.732281Z","alert_count":0,"request_count":5,"received_data":48622,"sent_data":3113,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":8,"received_data":314118,"sent_data":4643,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-29T06:54:31.365163Z","alert_count":0,"request_count":2,"received_data":5527,"sent_data":1106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-sheriff.tradingview-widget.com","ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":206730,"first_seen":"2024-02-01T14:12:53Z","last_seen":"2026-09-26T05:49:40.827796Z","alert_count":0,"request_count":1,"received_data":687,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.getbutton.io","ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-09-30T01:23:26.205342Z","alert_count":0,"request_count":2,"received_data":443350,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widgets.bitcoin.com","ip":{"addr":"13.115.82.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2008-01-04","domain_rank":0,"first_seen":"2016-11-28T05:55:58Z","last_seen":"2026-09-30T18:20:22.859568Z","alert_count":0,"request_count":1,"received_data":178,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-28T00:04:09.493151Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":824,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-09-26T05:51:59.247687Z","alert_count":0,"request_count":9,"received_data":15842,"sent_data":5202,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"widgetdata.tradingview.com","ip":{"addr":"5.101.223.89","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2010-03-20","domain_rank":179381,"first_seen":"2015-02-20T09:47:36Z","last_seen":"2026-09-29T16:17:48.686664Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":786,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-27T22:46:09.539328Z","alert_count":0,"request_count":2,"received_data":975453,"sent_data":991,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-09-29T04:32:28.101426Z","alert_count":0,"request_count":3,"received_data":6329,"sent_data":1746,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-27T23:02:15.547295Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":556,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crownspring-capitals.ltd","ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-30T18:20:19.518769Z","last_seen":"2026-09-30T18:20:19.518769Z","alert_count":116,"request_count":58,"received_data":7345572,"sent_data":31498,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"SweetAlert2:10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.tradingview-widget.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-05","domain_rank":196495,"first_seen":"2021-04-08T06:14:48Z","last_seen":"2026-09-26T15:27:12.906596Z","alert_count":0,"request_count":22,"received_data":399835,"sent_data":12128,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]}]},{"fqdn":"www.bitcoin.com","ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-01-04","domain_rank":855986,"first_seen":"2013-08-06T16:26:26Z","last_seen":"2026-09-30T18:20:21.998944Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":165395,"first_seen":"2018-06-24T04:06:00Z","last_seen":"2026-09-29T04:54:54.20052Z","alert_count":0,"request_count":1,"received_data":13526,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"vsb5.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":980693,"first_seen":"2020-04-03T19:45:08Z","last_seen":"2026-09-18T16:45:05.300943Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1113,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-28T22:01:00.454273Z","alert_count":0,"request_count":5,"received_data":299104,"sent_data":2977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":1,"received_data":73940,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-30T01:06:43.135174Z","alert_count":0,"request_count":1,"received_data":32459,"sent_data":580,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-09-28T23:10:56.947134Z","alert_count":0,"request_count":16,"received_data":750386,"sent_data":8273,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-09-30T09:52:40.059403Z","alert_count":0,"request_count":1,"received_data":972,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"56664bad5237fffcfbcaee400518564f","sha1":"3f47a13cde00d423a0cc3061a872760292c21aef","sha256":"de2515399028901391b02ed842ad1772ab240687c48f270b1ffe645fdc0e68a4","sha512":"a7ee45b9531f769f430463ece3839cdc81278f86dceef12e74180198f5d161bcdf4bea83344b6b9cabb6cd1dd56208ca6c765f280b09913206bb0372a9c6f36b","ssdeep":"1536:Tx+0LFrUzWBPo11B7IST6FewNqDYsUmUa+bu354EnOZDXAZGJC0xbqrly5kZG8yp:Tx+0LFrUzWBw1l0ewNqDnHq30sO64ekA","tlshash":"f993a71676a0107a94b77336e53fc914f1b25a3b670588a1babe60bc4f34d4053b9fe8","size":94178,"data":"","first_seen":"2024-12-18T04:43:11.087874Z","last_seen":"2026-09-30T18:23:08.362361Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/apear.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a56c286a3f49f44e2fdad088a39d359","sha1":"dc1135d4ceb6b58f8ee0cb6f9619e5ede803ffad","sha256":"059406eb4df59cd0cf6b980c1f2fdb0d2fde5f98aab54bab4f6eee4e34ec2b02","sha512":"c29678741213649cb1c4411e5d59c1eae8c0d6e41f07c8c867f3549510bc6ebc97006a43b27682ae99f14aef5baae7086b1d6c2f1da22a50ec9477fbfcbd8c7a","ssdeep":"","tlshash":"d8519b0eb5da3d955973b33e9b6ba104e67100375242c2517cec9c783fb2c50a5a6fd8","size":2595,"data":"","first_seen":"2023-03-14T17:40:47Z","last_seen":"2026-09-30T18:23:08.35242Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e311dfb2bacd0a25231cd9e08ec9a639","sha1":"3acc061aa41b9f416ce7722739aaff4b3a148ceb","sha256":"1e190bdcc22d4f881ec80b05253a67900f02d86ef4994e0b63135659475ac90e","sha512":"fee0671e5bbfc3a8d70347da1222f5d7585479a79c0a1c8910932b2fd87543dd5e93d3fa5e679676d97af7d70b0fe573ddcfa2dbe12d547e04b9b9e18be6f873","ssdeep":"768:isGZuIqJOZXpKWHqVocPy//5QWSvXS6BzP2RKuJV1:izRq2//hvV1","tlshash":"8c433317ab11043a90b3e33a9ab94e1af275873754069cd7377d66700fba02812e5ff9","size":59463,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.281399Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/marquee.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"46687d9b7e42961ece2fbf13a67dd952","sha1":"40888d01171c2b46157a1b5ad593078ab743a681","sha256":"c1de827cf52f6fbe33c524a6600d6a4d09eac6d75709146a2303770cd189c27b","sha512":"631ee3c26e4770a1769648c56161da170d9e8733438966c4bd0d091d2d29d6f4067f1b728d28580126b1ef99438a0732536ae866a9c991f62fe79e1e131ef3ca","ssdeep":"192:PTfQ6/YSFGUAoJ/x3F7EaWBuGxtXPNGDUdhdk/vg1Xfq16pjjEP:rfQ6gSQodx3PwXPNxdh6/vg1XfqP","tlshash":"de42e1154aae1cf24c2ba0254fdf00e5d7358287a10fed32b85c72947f8d92496bae67","size":12419,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.408552Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"49771eb7e1275942c06b1a1834edcc08","sha1":"61e5aee8eeee1336bcbeabe9eff30841f6ea472a","sha256":"0b4a993a2f7198f4d18034231232c1f07ee6c6997da26f42d903bcf32aaddeda","sha512":"c23e00a29da9796cb60bd449ba6e9f43cfe1419af57c05e5d5a86b14803ee79e95b6e5810d5352d0fc2293e3d0d7882e1714df10b52eab1c3f3590e035bd7d21","ssdeep":"","tlshash":"6c01024e9c432a76264b71aa973f915034b9400bd819ec08768dc2c05f69f4c6d17efd","size":730,"data":"","first_seen":"2026-06-08T23:36:01.268565Z","last_seen":"2026-09-30T18:23:08.413366Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f690b84d17aae7d4f838e94665ab2ca0","sha1":"84fa13308bca26602a832a09ab23eabc4d78ed56","sha256":"15f0027eb33c0a3d0df32ed620104d036b4b1fb0f78fbb878db2eb1c247500e0","sha512":"1644bcf23b4e8e98dc8c226e5d97da2a0ac7072786887850cb91378b0399b18b33a2f263ce57db4d3dd0f27d34e4db212c01754e79f3c25c539f6d7fe8795c84","ssdeep":"","tlshash":"55f0dc0b6c5b8d3883cb318db177e205b83500da80d0b690d8cfcacdb21aec00616f8c","size":475,"data":"","first_seen":"2026-09-30T18:20:33.141887Z","last_seen":"2026-09-30T18:23:08.413894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"29dacb6ff832dab9554edba6740f16fe","sha1":"9f9b4e24d734086601bbc12194bca431cf62e574","sha256":"5f16a33d9d16fa9fe72f5c7bd4726cd3db61b5b5282561f6e106a81e46acbf52","sha512":"377efa6fedaf87b92a198a8254b13db31f9fce564b3d32bd9598888ac1909be53bd88b67455c73fb5c72bedd72894f6e6e8abfcf0f81f500c70514ea1d2d6aa5","ssdeep":"","tlshash":"a8413b89239701711aa322600fe703456594b0d35d44ce867c9c17459fe68e9bfef7d8","size":2378,"data":"","first_seen":"2026-07-11T05:55:50.09866Z","last_seen":"2026-09-30T18:23:08.414809Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6942d0a58bb512865fc29569adf2074","sha1":"0931a17ca18e9c729b28ca7b049f9df4dcef99a0","sha256":"ba82cf9f0d90ea8975750fb899fbcf21fc3503bc45ef79007358379cc2bf3a8a","sha512":"2904462076ad1cee4020caaf5e6880b1543f20bb94cb92612611cb330208ada8091cc03c651c2d25482e5e687bfbccfe4e83339f6995b43faf0620ed97cc83ea","ssdeep":"","tlshash":"c8117d5abf4a07dbae37d14682ff401464a46c4b1e88de007a4c7892ff5257864995e8","size":857,"data":"","first_seen":"2026-06-08T23:36:01.2703Z","last_seen":"2026-09-30T18:23:08.41535Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"839327fe866b24c8f3545000bddaefa7","sha1":"f03f6c61ed58425a53004241673e9926a25962dd","sha256":"b3ce5da6e4801d85aaed4860a22e4ad43d319c9da8a931df79a42e0d3597d8e2","sha512":"a656a81b71a30664a8991299b7234acf96037747d9afbb59546334df1f6cfd2183b5b1f7e0f1192f46173d4e7a35b6af2194898dd305ae6cbfefafd9bad5289b","ssdeep":"","tlshash":"cd017b5c18bb26374d2b38199fab9320b82211232187d040f57d888ddfb5893578dfb8","size":849,"data":"","first_seen":"2026-06-08T23:36:01.271432Z","last_seen":"2026-09-30T18:23:08.415935Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"30acca126765174ef889ba1acbbddd72","sha1":"1598172fb4101922051ad88a8e3f4a86dd4e8956","sha256":"f308fdb2b7e426eddd46c4d1862fa7fe2784eb865aebbdf8c867d34fae9e95e8","sha512":"161480b9bac126835422a2618dc0f5c1f760fe972249d993f054f39558d78f23c1e34b2c22bd29f971ec8629fd0439889f524f5804833ac6d9ee7cd4597e626c","ssdeep":"","tlshash":"b011dc4730a201b9249fb007f3db7889b57d401b4524ad84b31c6a451fa2f09078e7e9","size":957,"data":"","first_seen":"2026-06-08T23:36:01.272192Z","last_seen":"2026-09-30T18:23:08.416537Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e0b845a0b77dbe6611fc6fab78028cf","sha1":"2538e4b927a882c03bd08196af5806e726131a08","sha256":"0a543af07a8d87fa3f5096ea14f896baad76213cf763e1cf24474b49087b435e","sha512":"c8e009dd126ff1b6bc6ddbfdcfa431704a064969b1b8e8d8253febe100ee3ad369c9ec13159f42c5a577d6e6e7d168425f10b5e37e2784c85ab1bc6434a7ee10","ssdeep":"","tlshash":"264192bd575609ced0eff382bc45304e51f5f1aada42ec157e4c47505f53b2a9068a38","size":2356,"data":"","first_seen":"2026-06-08T23:36:01.273009Z","last_seen":"2026-09-30T18:23:08.417282Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c5f78de70b6c9db57687a972d656e26","sha1":"b37de993113a9b05e3560c694d49fc27e34ba0bd","sha256":"d497d13f5482649f199fe01721a11ecd7524b4036cdd82902705918bc2072f12","sha512":"2dda17cee1a1f5dd81726f53402ef289127631a1995fe67fb2b22b3ac2e06e5ad01622c7f194fa913e21ff5daba8db3103c987e0e24484add2265cb4d1705a1a","ssdeep":"","tlshash":"8fe0c61c39403c20a24685d328b2ee4c30b23128a048ac10889f8c482b58e89c829fac","size":332,"data":"","first_seen":"2026-09-30T18:20:33.152707Z","last_seen":"2026-09-30T18:23:08.418279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"42e34d43963ba5c8f37c775b35258a3f","sha1":"77848caef3f422b34490fbcc9b420a2eae91e973","sha256":"4bca020551dc54855ef72cda3d88a25ac010c32345bebd8111e1d884f56b1dfb","sha512":"1d102717114d2322ba1fd3ec6fab0b9da9bc194793c340ce4efc56611ac5ea53860b13a04ec8c3e20da463da1c752b9254516dce5bc499934db40f301037ea5a","ssdeep":"","tlshash":"8690020da4210201206830c4fa8236426c9104a04f099c100101d81061c910bc8556df","size":46,"data":"","first_seen":"2026-05-25T20:24:44.282834Z","last_seen":"2026-09-30T18:41:38.271906Z","times_seen":5994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d411354f21bb22b65f55d8bfad14f6e","sha1":"0a0a24845eb1cac5a48518e1bc5db6e3d5dce792","sha256":"cb1426008557b5894157468472242e22bb84d186d91063e50456abb38b79ed23","sha512":"f95f53d57cf6b8cd06137c700ea9f82b2342115f8ac40630b9fcd57322f6e4d42e6ed7ffe48e64c0dbe39388cfb9f76813d882fb40b9c5504cf0e670ab3b28fb","ssdeep":"","tlshash":"1d80002080a00000a28830c2e008002c3838c3320a8022c0838080028082ae082e02a3","size":27,"data":"","first_seen":"2026-07-16T11:36:17.999846Z","last_seen":"2026-09-30T18:41:38.272817Z","times_seen":4651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1702a66446c4b00c54520a98df03e1da","sha1":"fccb2d2e7a095b1ebbe27368671d3dd66712bc70","sha256":"7e05a4b6fe7d2ff582f27fc14b68772017da7e5a7186c971ad09ceb968556d94","sha512":"d7eb89eaea5792c221db15087b253ededed31ffd43ee036cb766568cc7530de282ceed3e8f068b9952e35093110898bbe9bf79f3e2fe685b9097ba77ebc517aa","ssdeep":"384:RzkMw2IpJfoDnEowCEGgIJcZycoStmjTQeJrAa48XGWs8N:ZnsoDEzGrPw8N","tlshash":"d7923f67c80da72ad455de26bc7bb602fc3e4b6944a5292026ecc87c00c7d56e30bb7d","size":20261,"data":"","first_seen":"2026-09-30T18:20:33.155672Z","last_seen":"2026-09-30T18:23:08.420442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8062d232826eee4ffac1e152a5142514","sha1":"1b7f2090ebcfc1380f56c34dfc4f294c7301605d","sha256":"ace81cabed19b96885e6fec0ca99bfc73b71b6ad7df50664f92e68ca7281512c","sha512":"4e11703f66d5cb936d78dc2aca12c94504819135e1040189ba4675f1c0b5c1478ece5ca2f02d7c893a38b341f34dc318703d6d7a4c51307c031d5384676f2c01","ssdeep":"","tlshash":"78f02d7c1403dcf784fa1082c6b8e2c0c653856aef942ee123408ac2220ebaf02b1bd1","size":651,"data":"","first_seen":"2026-05-25T20:24:44.288837Z","last_seen":"2026-09-30T18:41:38.275113Z","times_seen":6221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f07c4f86a1b5524cec5397c170a0e9b5","sha1":"a8ef59c61a316f6095680bcecfa0c48466d72593","sha256":"32849254237db69547de8eb2f61b99d95e7466b89168687bf780bfd79467fbd0","sha512":"2c656e2adb0d00233577547ecc1f0efcf98bdfcf0f87ffc62fedafb4e4fc22e8c04e348d02bb3f3d0db21962e55712f132738e0685fa2c3e9755a241d55b9446","ssdeep":"","tlshash":"ce11570a0135042a7ae04164b6362ef5352c3add4b43daec5b857c0972b3a768d50bfe","size":957,"data":"","first_seen":"2026-05-25T20:34:17.759767Z","last_seen":"2026-09-30T18:41:38.315461Z","times_seen":4987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf62e8abe12b8a7c1ce6426e442cf1fc","sha1":"ab9267f0ded09b5d858dba3e1ae272e85656b41d","sha256":"f78fecd44c43018d1e790c7d86e8e0a43f7fe5a614a0bfc2b483c2522ece5293","sha512":"1b2bcde02c80538eb0f848eb335ff646c4fa96b107f1140427a5d4641c2c7fdb2b9706a2b2391ea43dfd3dd85f8dcab8de877f2446585b9c1c4cc889a97928c7","ssdeep":"","tlshash":"e9e0cd8791348410b2d55948e13915f531047696e6034ee1f320bf0cb1567f794e5dfc","size":321,"data":"","first_seen":"2026-09-30T18:23:08.424074Z","last_seen":"2026-09-30T22:08:59.857512Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"989fbfe7583729046324cfa8fb21c970","sha1":"1a248c99437ed09a6e109d1960040261a3486995","sha256":"6076097424e5ac7adf4480a69e561cfd6f7a3747605c8847fa4c2e585e0af1c9","sha512":"cef369bcd14fb208c83b8de1a4aa63d4cdd3cccfcc259b50e166fa63cae154ecc10088b6bdad3623f4fdde64b9629a7261522d16c871658066d81b252c0a724a","ssdeep":"384:TT+r90POo2JmpuBLuzYzL5XOKylkuiNASZZw3E/OpMtKN57M1Dg7:TCr90mH+qLuzYOiuSZZwH5OE7","tlshash":"3492558196270c052be6474a68325103b32406f8e747255cbd686deeae2dbc671f37fb","size":19382,"data":"","first_seen":"2026-09-18T11:33:03.27956Z","last_seen":"2026-09-30T21:42:11.080637Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"850d772d3afe7db0da3dababcfd04a5f","sha1":"fad763a74e7787e28a8df5b443e28f1d4499494f","sha256":"864982f4fac6ad336de526f0869c306bb4d9dd1051a6f1d03e31cd81b55d52dc","sha512":"8a1c41589362afa383063bb214eac859a6fbc9eb9bdd00676fdf90c78003406e9ae3b884b30ab06f52aad04f21fb191218177584364ce1cd9b551b2b66b0db74","ssdeep":"","tlshash":"5921fef1902658760d9754d832f2dbd63f373a99f28728408d7c494b211adca18b1dea","size":1205,"data":"","first_seen":"2026-09-01T17:35:13.990659Z","last_seen":"2026-09-30T21:42:11.081145Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d080aef1e28b9ced897f549e49b13916","sha1":"75abf1173fad589cc5e35b388fa0a3067188e157","sha256":"cb914bbd5f3df056d111c04f26650d699d100920c24e13e5e50c67ecd1de4e93","sha512":"746fc099bb9ed96629e79d592c09b25bb38203a52cb1dced0a65325ff096b1ce9f508f5f2a26570312d75569a6b56be634501e6fa6a59c2fbde67af8418caa04","ssdeep":"","tlshash":"48d0a754212b612234dc3054d62ee6d1f5151a922fd310ebd7992018b665893a9547ed","size":245,"data":"","first_seen":"2026-05-25T20:24:44.292788Z","last_seen":"2026-09-30T18:41:38.279919Z","times_seen":6258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/96931.458e5365d85ba22fe8be.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"28895ff40bab03b02fde1d390e8c05ca","sha1":"651ec0334a6c7daa391b6c91a20474985436134c","sha256":"f86d545536f0da31fe9e62222d9d30c8074f7ce81e0136c97edab99e14eae2bb","sha512":"c53667dae193f505fa44113eceb813cc0b5ba397edcbce4ab2d01bc8ee927ecbe132ce55ef77a2a005c3884e9159dad028d8740eb71ce0a64f82758ede8062ba","ssdeep":"384:QfI3YDRMRs6gFFCZwGHuuxK1zIXbvhJqYHcFCgue1K9mMeazmIpXjHKRN07ZI+AG:QfIkRMYmZwGHuuxK1UXbvhJqiXg6mMe4","tlshash":"7c82f894319b702b03e515efd8255641f738186cb40e88a4fadcacd9389b88e93f3d6d","size":19164,"data":"","first_seen":"2026-09-29T16:17:52.702484Z","last_seen":"2026-09-30T22:08:59.816345Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-66332255-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ffd1e16e41bc79cd1e2d24f326bcafc","sha1":"73fcfbe6f1ee82402a8dbe8932e20633b1a1d6d8","sha256":"f0cea669710bc8b7bbacd85912965dcabf535a77a519e8a58d3fdf2d55cead81","sha512":"b2b02b737d30a612e4d1c2ff6a43c41d636140078cddf46dd84036d7ba7036c836e600c0c56f4e736a43540ea92cbcf7eab10ce99b49cddf52ec12f269e3f29d","ssdeep":"6144:ml/EmeGKjyGr77mlYHugcK7s99Ob4EBG3CpNOdq3N2+eztZ:RoGaS57s9sOda2P3","tlshash":"2a8419ccb3d6b42283a2b578503f018bb27a69d2f84cc899f246d8d42d3469a5177f7d","size":387136,"data":"","first_seen":"2026-09-30T18:20:33.019666Z","last_seen":"2026-09-30T18:23:08.307493Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/countto.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc472c43a5157a4e1e61679fc3e95ac","sha1":"4478d1290b163b18e209fe1715753e6e21995700","sha256":"c30bd86f2f691cf97e8f6facb3eb18c549b53248cdda78b225de4d15da66bcde","sha512":"b2e0a0119e027f6a4695eea4d858c9614d2ebc8b6458543c84466371860b8543884a8bcd082acf50c73f4c737f5beabc467d78d4115778dd30bc403c72a04d6f","ssdeep":"","tlshash":"d4815989b75f2211957733e99e5b124ce779933b144302487aac92c04f72824eadafbc","size":3847,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.390797Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be9ae937812c44593cbc5803a4d1f38","sha1":"0c00ddeb1b4aaa75896ea513060d9fca7cdeb984","sha256":"89ee5b5a770d133a1e1720fabf437d4d4e1664aeaccf0a60d830554e2d7c9f97","sha512":"0e934a784a5f8f4853d100ba1b89417cf33e2f3ad31cddd9f27c387d36effefadedcd402e3940624ac8954b427c216ab5cdc77f44a727ad8bd3f5d48958cf1f7","ssdeep":"","tlshash":"df5106998876d0d6c4436c29cfaf927932444037ac11dce5bedcd912ffb051ab64d5d4","size":2990,"data":"","first_seen":"2026-09-30T18:02:23.865521Z","last_seen":"2026-09-30T18:23:08.349796Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/theme.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0873d945ecd81a89e17c1bcffb888ac8","sha1":"8fd5bab3060d3c7e6a8fa51065344fadca548ae3","sha256":"c899045f0a8629c822b5fdefed2fa1fc37dfb32a96be248ed652de46278528cf","sha512":"bec2772130e3f4e0fb3bcb7d3cdd2dbc9f39d1d9eae39eb0d296144fa96c0d350fd481ac6dc848584b8ea4c89a3cae21b4aef45ca7372f85e9bbb30eddf7717f","ssdeep":"96:L2c1zkM51g8xkARCK/apIJqMWMsdU42KYFOygZebqLId9:Rzky1zPRCevTWMsdU42KYFOygZeR","tlshash":"53f1eb0aadd110669477f7389faa5608ffb1432f8242d893bdbc16a45f3221a515efcc","size":7900,"data":"","first_seen":"2024-12-18T04:43:11.076224Z","last_seen":"2026-09-30T18:23:08.302928Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c29bccfdcf4932da5d72db3ae5980e74","sha1":"e1808375f5e3877344df661ca3d49e4eb64dbcaf","sha256":"a9677a302d962058a69374b281d6fb7865eea33169b688674f93d2f539c01c53","sha512":"4bde355148956bfd9afb126f8e91fdc8487c3253ba7d97493a9e47899e7d8088d826b6199cbfe9a9f2f9c2d718ef36b8bf27fd225e316c3a1a7e2d6bda436f15","ssdeep":"1536:o2SySvGuDorFU6DLfOCD3G4/D6Xmds0xGMZ9Fo454xeDNY0JB:TS/7crBJOKs0Gqa4Rn","tlshash":"6673b657f6c00c7d86b7a215ca3e9818f2767b2ba70188a3b97d54684f3491012f6f7e","size":74929,"data":"","first_seen":"2024-03-03T15:52:17Z","last_seen":"2026-09-30T18:23:08.37556Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.waypoints.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f20942241958400468848972e6e322b","sha1":"196b56b86596763b5213e181b96f91f1549e9cc7","sha256":"3c57aa21470e7dc530838c84c81a7357f067fef9d16e962b1b266d4d375692ea","sha512":"6458d845477c4847e2ced666fb4219bd077efc9955a150c1cf4ff3bd40785e73a862725cf304c0246ec49b8b95949829f33ed2f3e8a824323876f005de871975","ssdeep":"384:mEAsHfr7cgiFHw8P9FaYMEgy6yDTtiduidQc7qO9BuKq59/hlzto:m4fr7q9DqXWqxq59/hlJo","tlshash":"894202096ff52422a75bb079dd0f96097335841f654a9c25388c92d80fb703c5bbafad","size":12877,"data":"","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.305966Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.counterup.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e788a1f7bf3b5b872ca8e74b78d07d67","sha1":"a37295eef28f9bd45cf6ae11c505b6c0e889659c","sha256":"6e21813f29d1fc5f161e7141d07caec46261268a60a69d2b0f4b8c7a2a1783dd","sha512":"cd11bf814622c92fe346563cabc106068ac26b54d6e8387bb9ffb80989915e7d8138eeb1c01f9e7026a87ef7beed35b15d6bdcc6a0c860ddf54bed51fe7eabbe","ssdeep":"","tlshash":"6881672a6c7b18882e63f17d675f32546332b51b0414dc0eb99c51801f86a3d93e6fbc","size":3992,"data":"","first_seen":"2023-03-26T11:16:32Z","last_seen":"2026-09-30T18:23:08.295367Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/30235.a8dafec297d4bd7121bf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bacd9a7e8ac893e05c873109e1b3a8d4","sha1":"8753029eacc8617c83f60945d44d0682455e878e","sha256":"bb59ed69987807a980ff5044e1d5eb55d4edfcb8e5460e191b11fb24524d49aa","sha512":"50c35ba12a81554476fc4d7180143b617916aef222a2e2065ffbd6a3ff8493e1865e69981bca837202da7221faa7528a1b3a99fea470c3b81c2c03108d025750","ssdeep":"96:w7ZIput7XybCUh7PE8Ne8tqhvcElErhbv2MP31Ss0XKuWlAQqX05kHs/ka+qp:waY78ls8Ne8tqhvfObOqb0XV8BSukske","tlshash":"daf1d7c872f0f0dba3e328e480ab4806f1369d69558e6066e34566d32d35ec681fff95","size":7563,"data":"","first_seen":"2026-09-04T11:21:10.926471Z","last_seen":"2026-09-30T21:42:10.952014Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/11401.47821c730cac88dbdf05.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"210929184b81781778883b4f22b7ea9e","sha1":"e455f7bfdc57b0acbaa35dc2f79f485d443b65b5","sha256":"e67c50a2c27fae9df11d8630a7871f95e62e12ce2cf681f5361e61b254222fd5","sha512":"a727f73aa88dcd6f04e994e43a4946a4d0daef663442a6a741b2650ab1d7eb8713a9585adb7995b21934514eb3d18c7d16b7b5dd67425e3d4a218fd0395491a8","ssdeep":"192:HY1vY1f5DrV0yAOuPQu6FX7Rc1DMk28hMiM+87VKfYPqu860bz3f/sE+KD3zDX:i6RvVRAzPQu6FX7R4DFjhJwVKfYPquly","tlshash":"da02979779927571638b259cc0bb450b25a96c643ade18aef93914cf2d1fcc03087fb8","size":8677,"data":"","first_seen":"2026-09-22T13:35:19.60618Z","last_seen":"2026-09-30T21:42:10.876025Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-data-impl.cd9336f80594f1653caf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f183361a6066be1b57a42e9ff5e6f1cb","sha1":"aff1eceb129addefa1aea9d2b415ecf1a435c951","sha256":"0c7a379143f68e1703fba873a476b3dcc66984e0cad7dd3f9753b4f17a853498","sha512":"cd8d51e4b536b40f08b30cb43c5d7d52e83ebbb0ee85c42c5db04072cd9c9356d15c9d3520d423be40501ea91cbb5244912b4de79f013c07e25cb4c8589ec8a5","ssdeep":"96:0hbEp38HaYJtrBmFnBHr2s6twCAftFa9wU7KLD5XUn+:UbEqrByntrFq5AOKtm+","tlshash":"ad8174462641a5cc2293c878dc3e15e4621f69fd728f53e0fab7ce30e4839d5a996d2c","size":4098,"data":"","first_seen":"2026-09-30T13:46:39.695104Z","last_seen":"2026-09-30T22:08:59.809588Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/nice-select/jquery.nice-select.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e71515190fdc2ef9c33ae5ab7a714bf","sha1":"f5f552ef4122e4595e4e5db160f925f8aac9165f","sha256":"6f59a94be1126e463cdcc3784151a1529684afea738ea8f0ee3da7353cea858d","sha512":"0c50720b3ab3ae2eedfc9867b4c53aa737172457a1f45f649605afd6cf111cfde239e3c0c18097fd2d18082a48bd2f7b40457a1110f85eb5c22d71744a5304a4","ssdeep":"","tlshash":"b181001ab2d121b294ff30a32a137045b237582be569c5067d5d42f01f9ec70abf6f9a","size":3969,"data":"","first_seen":"2023-03-09T03:34:05Z","last_seen":"2026-09-30T18:23:08.353015Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-30T21:37:37.705594Z","times_seen":107229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fx-rate.net/converter.php?layout=horizontal\u0026amount=1\u0026tcolor=000000\u0026currency=BTC\u0026default_pair=BTC/GBP","fqdn":"fx-rate.net","domain":"fx-rate.net","tld":"net"},"ip":{"addr":"104.26.4.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"716d83f45d39f6ff11a5aff3c1f0ab79","sha1":"73738404b401e59cf5988cdc9d33cef84caffe3e","sha256":"843f9c3d8019cd5cf23e4b54bff820d39118590742a3f4659c6a5d2f2d791893","sha512":"c6e50cd1a8caa49da6d825767540702f53f3ef6714e91f873a1537f22782d1ec160c74d4122a029542814f2c6189ff431f2e84b0f35183fc32d19542f59d28b5","ssdeep":"384:5qnDDsP02INYYR7FPfwsn1Y0V1VUUr7iLV3n7:5qDDs82Wf7FPfwsn1Y0V1GOAn7","tlshash":"f6a2ed563991ce6490cf1ddf5132327468bc2741ab864289fdae97f3932e8edc233619","size":21745,"data":"","first_seen":"2026-09-30T18:20:32.932419Z","last_seen":"2026-09-30T18:23:08.359551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/recent.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2411e5e498a25aaed8d9d49408738530","sha1":"3c4ab4c53474c458541ebbb3f83db5a3ad1a6dc6","sha256":"0142624c1d2f65fc49a1728209dda6bc370c5a4537ea54cdcbf623b10ed1ec4e","sha512":"3cad8b0e784ac2ec54e230be42df2df49fe8506d105b0a83b46b67d0165e8b5c850e7fdd359ebcac2799ed21acf7a17075bc6b68e051fcd40b9a96b867f610e3","ssdeep":"3072:QSLksOwzzm9qOoXi8JvI6nMjuLMdx8OjQ:QSLk7Kzm9qOoS81I6nMjuLMduO8","tlshash":"e14448acccb202d1067a66301b7a154da09882f79df5be66ffecd15a0f1ec1e682171d","size":269441,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.353393Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","size":13016,"data":"","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-09-30T21:54:54.53598Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/owl-carousel/owl.carousel.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"348605eec23f4b9453f47ac36252aee7","sha1":"4678a2d55db84d3d4f5b866c823d636d4fd28fd1","sha256":"a9310673426df68492975f744a9e1d52811dca138bfffa78eae348d6c7e21b7a","sha512":"168c85f29af8fb1f9e21c9f70c195dafcc7d3eacc3d329af96df381cd5474bc1248849b41e13139126380ac48bfa446d3b320af743958bca25444905cb922ec3","ssdeep":"768:/oHrL3BMEwlM9bEbTkGbqIPpfEdg7iB3n8W/byUMR2bZA96ZWb2/+WDS1KKNYQAA:AHr7ylM9wZlPmywgwmKKNYzdH1Yeuv62","tlshash":"b5433e0aa3f0182b8657b0605e7f9a067236441fd549ad9c3d6ca2dc1f6c47806befbd","size":58009,"data":"","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-09-30T18:23:08.302345Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/62851.4a20be41fac85f76ced3.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2428972098d3c4a46cf30544709ec071","sha1":"171f56d5429b2e15994a48e6a9988b914b6db455","sha256":"0ebf37333f51aff2bfae1e7b9cb1465b000e47a6d5d9e98c033156fbed0d6e05","sha512":"968b7a537a7364959e5cfda210e3ee36c94dbc565329dc8e13c4c1b1f1c27aeb55cc9076e3cd14ff596d7a8637b14383dabae0a8147f3048a5aa1d99fef7766d","ssdeep":"1536:Sps5O1Tuc2kGyeZ39xTEK55a8J8TRRcPCpsW5xaTeKgGZJgwSFCHvV+P3zoJZdmR:SXlWyQboOTxZQFiysDxQ","tlshash":"a8732952e16764739bd2827af4323203e2ac0465b8050c78babc5dde1d9d9c57273fba","size":73807,"data":"","first_seen":"2026-09-30T12:24:41.289639Z","last_seen":"2026-09-30T22:08:59.765215Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/particle.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62ef1c27fb67e791d1734712fd5b4138","sha1":"929aa84d1e5bf66915fc1157f6a337b9717c0d23","sha256":"46c96ff2eb1ce3ea4e2ff60518c7e543ebc37918c03d8a8e591ce7d8a008137b","sha512":"eabd22c0c8225c4b973bfcf9676673bf22ada435039fc80bfc24ff4e997fb8a61f7528a12bde4a91495c80b6657847a78af88717367c99e35b6091cbeabda2d6","ssdeep":"384:kZR/TaqbiUWEwLge3gjGCWr8pOwtZciYc7asscRG/Af3f7AGvVWnbp1PFH+L1rW3:u/HZ9aWRGof0AVWnPZ+L1rWsdA","tlshash":"0b53ec8d5bf72c232247b1b84fdf9002e73080d71a4a9da4bd5c02599f98965d2befe4","size":61361,"data":"","first_seen":"2024-12-18T04:43:11.080043Z","last_seen":"2026-09-30T18:23:08.354208Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/13148.32cc01dc01751b91682c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eb8a2729659cd900aee823198b62b43","sha1":"27c53602ca760b97d71eef345b01c1d537900aad","sha256":"3ac4b66b0a6823b837035a5dfdf7fe41b01ccf2a2ac115b143c12356080ebdac","sha512":"6c86fb2c2378e589f4353d32a048ae866196581fc0a8a7ed13c379eb47eab41fcbfc0ee44f3ffe77ff3800136be1da4fbfecfe3456524b96712a1e5cef42945f","ssdeep":"96:FRi/jMMHFeHojARuZi0DWss7UebYiWWD+WRdiaEBymSM0qRIv0nrWvW1HN6Fb0so:rEjMMlIeARmLWss77bJWWD+WRd8ymSM9","tlshash":"66a1e987b9c2f0a063d9aca5953b054ae23d6c1c711bf0e8e2e9d5d19c7b10b9112f36","size":4812,"data":"","first_seen":"2026-05-15T11:49:16.287975Z","last_seen":"2026-09-30T18:41:38.122486Z","times_seen":6283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","size":292791,"data":"","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T18:23:08.410148Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/popper.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5259c4560cbd2e4acbab385473035b16","sha1":"e4a6ddec75f53ea8546d9e80ac85ec6dba9e4ed8","sha256":"ca673877524dd1585558169dafd5b4cc7c680c93596aa37662598f0c9b749116","sha512":"9aaca9198e983744ece35ac7dfbbd22193b1c6fd1d382efb138782c6ea32b34b18f185004ba4934335d3389a81e3227f7167a12f3b01274f115478072145e239","ssdeep":"768:1QauBa/OnaRgDgGQzRZP7U8L7rUFJ4G/HZ6FRKgHLBJxRvM6RtA9qR5V2RSxeb:gQKruPU8L7rUFW9lA9QM","tlshash":"e4e2549d7ae131358617f03a896fc8097332141b5a8abc003d4ca2956f7497c97baff9","size":33720,"data":"","first_seen":"2023-03-11T14:25:01Z","last_seen":"2026-09-30T18:23:08.388935Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/parallax/parallax.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"442b56bc76e5f04da1922dc1bffe68b1","sha1":"af0e3bc6ec615ce67141dcb35522c1f29e83869f","sha256":"d6036d8c76b17ed56be5eaf78875cb5bebd18042da6b8f2de6c15b53a0666c94","sha512":"ca8bc758130d4f66e8f160517a3c489b54a8ff5655ce58263ac68fd1bac2449a21074aa8f1f40dc2a83e527be768732939d503df49de83d2d0756f9574a3fd72","ssdeep":"192:UhMiJoOVHlIZBFnvEURjYsnDJ3JAzFEfYoVe9Erob:UhDJ7FEHnAZSYCef","tlshash":"8d12214b67f11022d38bf2965d6e4904e332502f3a0b981c3f9d10e89f6993816b7fb9","size":9562,"data":"","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.343688Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","size":10688,"data":"","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-09-30T21:54:54.591187Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","size":215095,"data":"","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-09-30T21:47:54.226074Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@10","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f9abf2d03f7ee6a755e0178d41f2f8","sha1":"9368de7d2e8b0d335adbaab171143e307ed5fb54","sha256":"2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f","sha512":"c138cdbcc824524cbd5cbfa8edf966acf66462916349a5d9539723c6f5f10f44357059cc28ddbb95d50d3e17710e9f533bebb658d82527d980804b8a3a31f9d1","ssdeep":"768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9","tlshash":"ce630689b6403133aaab4174659be60db6b56515fc330c18f128d0d84ffbd8e6273bb9","size":73160,"data":"","first_seen":"2023-03-08T15:12:56Z","last_seen":"2026-09-30T18:44:18.888841Z","times_seen":2349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"288e9e6c91acc4dee54bd438adf54dfb","sha1":"ddd8b222328b312ee7bc94d24b7e9b129d305456","sha256":"a29b329932f52e3f82f736ef4e9e980514ecf7177e86d92a29177db42e6d68f8","sha512":"863dff79f3506cc2fa8d9fee2aff7204cafdd04fe87410638faf31975e2dd21bb260e7e1957e2555262a9da6e3612ef94aafcd3bde7f4f94ae6827bb1d607787","ssdeep":"768:r6gxMIjAR0Zb5lZ1qLO+B4hKoecSuYRP/L2u0kKCbFXzB35AZdgIfNyCg6Lgp:r6Snb5lZ1qLOkMKjcSbnp0kFFXz0dgWg","tlshash":"08035327f5440878943b7666dd7f9454f2b2ab3fa204899138bfa1b00f38d5056f8ee9","size":39546,"data":"","first_seen":"2024-12-18T04:43:11.052997Z","last_seen":"2026-09-30T18:23:08.389609Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_forex_heat_map_widget.6020ab396c12bcb226e2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fffa95ecddd85d9c2ed5c7cb4e67b32","sha1":"acebd4ec4a9f0ff4894f32227c8f34fe4f69b73f","sha256":"832b62e26fc036269dd333713d457ca1d7051e0bec15aecd9c2628c7f8c79247","sha512":"528c9a11562d1c2998ed1bd57d0e73786ee08c0212ad5da06832eab18a02a79064adbe66a54a0f2da0f4cc8defc9b8a600e3781d087437f9576fc661a695fd58","ssdeep":"192:78j4vFXdPKD+rkZSJ0AnRlx77NOk+soF0M:gjwF5KDWkkeAnRlx77gk+soFV","tlshash":"40f1a69c3154e46125bb1892417de491f22c62bf5f07e4b0931afcbcb868ee47a73e61","size":7571,"data":"","first_seen":"2026-09-30T18:20:32.909823Z","last_seen":"2026-09-30T18:23:08.380187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76754.dde3cb0655e046a6a1a5.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fca88d3ecbe8b3b198d1145e91d482c","sha1":"d4d5b406ca0df160089cee81826670f39b004ee0","sha256":"f27557700b447eb54c002a8e5cf4905b3d3d524be3378b86662e8ac71b5f2486","sha512":"e3da18ae32fd2df105aa83b6c8398487f87dca5cd20ace13fed3a0194d4f8ba6cb0fe87c86e9d75418e8f6e6e29e52e5ce1f7ec60652912631f5462828050336","ssdeep":"192:rGvxIJoFOomDjvTKZnZHrbJ3TF25sYBl4AHW8M5q4lLJQRCRbI/s:qvSJEOrDi1BrtsBlW8Wq4llKCRbis","tlshash":"fc229554f0c21bec39a193e0f9b610d1f25bad46f5025464ffe44de329a5d8730aaea8","size":10121,"data":"","first_seen":"2026-09-30T06:05:17.884694Z","last_seen":"2026-09-30T18:23:08.355176Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2VT5C0V7PC\u0026cx=c\u0026gtm=4e69t0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b18e2ac9936d8588b98c1c4629615ca","sha1":"afd57a0e25dd48e13b01da67a934bbb2f45900ad","sha256":"94cfda6c78b87a70ca343320c56bdd35ef4dfc65bfbcefd36634d85c9c0c1a11","sha512":"a1da5b40a7406dc22bd3b36e41e91a8ebf3a1869eb155eaca8f2b536363d0f076287064e1491533b5087d3fb0d8a23e3cfb5098c533a1302713131299fc51526","ssdeep":"6144:/Wl/EmeGKG30xyBU77eGcwvQHxFpcK7s99Ob4EBG3CpNOj0ZgJ3NhpREXgLvR10Z:JU308BNaQRZ7s9sOj0ZgvhpYYJ4","tlshash":"27c409ce73c6742293daf578903f02cb697b29a2b45cc89ab289dce01d3455a5163f7c","size":587083,"data":"","first_seen":"2026-09-30T18:20:32.896503Z","last_seen":"2026-09-30T18:23:08.402085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a89c1d1f42e11ac15cf49c72eea030f9","sha1":"e9f6cf449b6b7675fc735cc40fbcd7db6068ccf6","sha256":"a731ed5c6318669d9394d1a2c0e96893eb2ab78d3d0f7d5e123ce72bd84adc6c","sha512":"0406e0cefec6526cc7991ae93e0440268a747ea9bacd0738abe89cb1ea1d17e55d4b55b000a0fcab65142b5ef7e0939c1d47d479766e6df74d1f44c21cedfb8d","ssdeep":"384:lRSaWT9+smNAsVs3euL4HbEAEuqCJ1kin:lRSaWT9+smNAsVs3euL4HbEiJ1Xn","tlshash":"1b625216fa101daec477723dee3b80d2f571265b6208569ab89fe0a84f3816055d3ef8","size":14823,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.385408Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/animate-css/wow.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b799b4cf76bb5149a938f4335150a5fe","sha1":"903dccc17af77033fef27f56f9b81b89315b6e49","sha256":"62fe10d2e8d8ebe2c9bc684d5f7f5c13fbd4bf09b24e7ad0739d56f9a2a85bea","sha512":"3d7c638e78ca7eb0f5d9fbb313bfbc4132fe98089188332675c3cef7bfd0f769137090cd710e860da9e76d2c8a411a489143ddabe36c58fe5492ad515762074b","ssdeep":"192:QUBFLA8Ke4CASNlI2k2zoNm2evFsXxyNiEW3Wg7qgfx0wclFwiWB:BpFwWIP4qjisXxyNiTV7qgfxyleig","tlshash":"6032f049bbe62136e707f07ace6f9800b635455f616c8c9c396c91e41f245348abefb8","size":11978,"data":"","first_seen":"2023-03-11T23:14:01Z","last_seen":"2026-09-30T18:23:08.282376Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a5df121fbcf9b1d42466b96/1jtvfbr41","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f29f08976359231da9d75ba865647bad","sha1":"39ebb780954aa6b6f68e8266929b7f0238e0d5b9","sha256":"aeb3b83c543493ed25673eb02a1b773b527693ddb808dd7ead122d32734a6c54","sha512":"9467a60752423ad7bb478583204ce328e092df8ddb5db11dddb7048a4faa10954fbec469fc876559852069b34116a647fbd94f289d953c16f9021e908824d6ed","ssdeep":"","tlshash":"8b2147f57e1b2537aa3140956e5afa053472415704085cc9460dd8d53690b7a161bcfd","size":1159,"data":"","first_seen":"2026-09-30T18:20:33.132039Z","last_seen":"2026-09-30T18:23:08.3331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/80580.ec8547202ace51762b59.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e20fd3fd8d74744f169f821fbe3a21","sha1":"16afb65ef7e5ef1f3120d2ede0e8015820fd32d0","sha256":"0f57b7e04fecd1a739bd8c59f2712be9758d4e8e438fd1addc377f7644be04bd","sha512":"d6d52684e827312d161e6ca0923c628560dfe7feb6b4de8e7444f9dd95348ade3fa0bd88e15192f13ba60ddc43f0ad79dc6a0bc93b4738c55a59cd882553af53","ssdeep":"192:zWV9NRGehSowGpJABD6rCKTV2Fk8iqA/t4bRPLYRr4/12IOwB27iE9eRYbuxocYR:M9NRGehSowGpJABerCKTV2Fk8iqA/Kb2","tlshash":"5322de8675d2f0e9a7c65cd4807b4446f01a0d3c704eb8e5e7e5c8d2da7a08f9436bba","size":10261,"data":"","first_seen":"2026-09-21T17:12:32.459958Z","last_seen":"2026-09-30T21:42:11.010962Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_forex_heat_map_widget.c7c2437b9aeb8e81de89.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a75348ac5938935f76b2b345c365cad","sha1":"2034b7908882cf59ae2920cb61dc49054aea0232","sha256":"3818cd0e9a5154d0817b3b628e5404f9165acb77a26104ca2a2bb01212af9f12","sha512":"2bf6dfa1a359922cb77ab775f6d9eafaf857d7299539965c1c29f21a21638d8393491bfcfa30a3488064566c062f7c84d6bdebce4635dae311a1f11cab1a9bad","ssdeep":"384:nOxYO/ArvDCnigno4b6q4rL4KjDLR/LBy4cXvThnc4tYXIZU5NJJcYgNx8orsiqi:OxYO4rvGigno4b6q4rkKjDLR/LBy4c/7","tlshash":"9282081861d170f387ab2499e03b5486e2711564f00a4591b3ddccee676dc89a337f7e","size":19251,"data":"","first_seen":"2026-09-30T18:20:33.04116Z","last_seen":"2026-09-30T18:23:08.387628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/me.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"742696370e8b63aee8934a653b0f5afc","sha1":"3cbcdd230885b15bfdbb1e7980a3ccedbeb86780","sha256":"9a58782ea59d0c0632285728bc49d99abfffd2030e36c9843679d1d819cdff3b","sha512":"e896e91dc7be9554fd34075f3a92bd8e52d615efa498d3127ca6cb5222e65ac9000e8bb376b8aa28d48cf3284a29444cd388f4f58539654a74b18e235170273b","ssdeep":"768:Bk4/i8vLMxHm2D6jShRg+LBYgrLM1k4/P8vLM//P8k+s8vLMOZ:g8Wm2OjShRg+dYp8k868f","tlshash":"6573dd37a601c83b45f4d150b4920561f7080fafe2391e1fb9372465ab8d9b5f68f72a","size":75540,"data":"","first_seen":"2023-03-10T13:58:35Z","last_seen":"2026-09-30T18:23:08.335131Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/custom.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4572a0f558b134d0f639151f7693e262","sha1":"a6a3a6473b3cef6d86413b80e8defccb7699b088","sha256":"26190c707062fc07dab57efc86f1b590637a6fb7c9758891d652fa926fbc18b1","sha512":"fb0000de760da3659724070e5aa57a412511f4b24466e2067d919cb8049707bfa33d9e5b4b313bcb99e290c68eea3b71fc97ef3ebbf97aaef0c6d99f77373b0d","ssdeep":"","tlshash":"e711a935117684850b3fe0b1121f50255ceaad1be9139b20397e658e4fa1ebc93bd4fb","size":1043,"data":"","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.283553Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-forex-heat-map.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b59a8bf3d1a82fddcea47db296a00b8","sha1":"caabbb307146b7495c9a4339251b28630ab61328","sha256":"b1298693c4b9a9c80370fbac381a26a7c7319ab9e5c4422e65dce87f57b7a61c","sha512":"479fbd44463a09d0301d79f07f3e7dba38780ccb72d68e0bf6376dfd1bcb69103cbbcc5f78cf3e153a543c7770ebb836cf977a1e28c87ea98d718f7bc2f9dd4a","ssdeep":"384:gf6uCWoofYkudjZwpRA0q6/UxmMs6lmEMET2s/:uDswpRAD6/UxmMsUOET2K","tlshash":"a542c7aab660dcbd519945dbe07a2320b61d3944f206eca4b5ece4c550bdccca530b7e","size":12574,"data":"","first_seen":"2026-09-29T06:05:19.234777Z","last_seen":"2026-09-30T18:23:08.35186Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.36637.6771b05c4fb05913ee95.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d51ec5d56bbbf8675ac035a76184243","sha1":"f5a4ebdb742b8a3c9ad43df568472167134fccae","sha256":"10559ae1e0ca4b45848689e8837ac3de63b5cb04680f21dadae8555dbd460b33","sha512":"95d8cc84ce91889cf3790d9a98b1ce08e524d9647d3dc5bdaca532b6026727f7303b8e2f70960880e411f0147b65bb65cfec0ad610aceb1720dccb0a62fe1a4e","ssdeep":"","tlshash":"3e41ea07e110c1f22f37ea297784eccab4f8b69201f6e8ca73564f64d627dd10624a34","size":2149,"data":"","first_seen":"2026-09-04T16:28:21.912088Z","last_seen":"2026-09-30T18:23:08.407371Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/12338.ab3c669fae535be94dcd.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d2aa30500c7b8a2235746f79fc7b5f","sha1":"cd4ea1012df9c7cbfd209096c998fe0d480dd5e8","sha256":"177424bd5ee1bf1827ada966e9e6676030b56f033c455a126ab54488cfa79a93","sha512":"4fd3e2a07b41c44a3992af598d325442a0cbe6c38303e69f14ef50a8e3f79cf7f54b4bd976e1f079bef3b596cae8c0ffed6121010afe6d41b07b7e87ec666c53","ssdeep":"384:X3A5p5R7Xi24wXqtKrVtY5AWyXCjuhJ/YxtHSc4+ebPcUwSd8GSALgSOMlf3CmjP:XiA24wXqtKrVtY5RyXCjuhJQxtHSc4+m","tlshash":"22a23a5af9e9feb6d7e640d490375446f22c054238888468bb7d9dce294fec80252dbb","size":21717,"data":"","first_seen":"2026-09-30T13:46:39.647471Z","last_seen":"2026-09-30T22:08:59.816941Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","size":9008,"data":"","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-09-30T21:54:54.803744Z","times_seen":780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/jquery-3.2.1.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"986d2baef41aa37ae02ab33355413b98","sha1":"ddb65f1fb486e0142e2ad61d11621e93bd34e4c9","sha256":"cb3c74487498e9f91ec9a5f5840f128445caf82d5d1fce5d4f691a71c3e1a631","sha512":"023c0579c370a1a207531876ab8ddd6ebbdf4e31ba3b51c2b1b43b8d1eec3a7f7b9c75fde7b795ff667cf6b081a435a99ca30d020190b5021d5b8e4b03f5ccbb","ssdeep":"1536:zrPxGtTs8qbaD98+kBgFMQPlhuHp77z+hLLHmbQhkBjN+dVtWRnnykV7L769LRcx:vPxbWhLHiEkSdbAnjsPcvDGPFreJ4PdO","tlshash":"6ee34289b7e624369613f07d8ebfc805b17a445b2a9ced557c0c91a42f1443886fafec","size":145741,"data":"","first_seen":"2023-03-07T12:09:45Z","last_seen":"2026-09-30T18:23:08.363421Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/bootstrap.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"43ef4106b4831ea0ee5f0d9b555e4f4f","sha1":"f5dd40f7765a63a8adb457de3f4afae2487a2149","sha256":"89648bbdcc9758f07af693fc823422a15ebdad7bad49e1643290ea085e212215","sha512":"adc01bb48e50eace3f2ce5a4b0fe10012a9ff8dc456c0321c57abb8219c99bce8fd1540a7f37d3877893dfc87b91bcd050887d4b6284269bd35790e6d0f8c2b1","ssdeep":"1536:DVvzuj0h676kEQINEsNJGVSed3SNJOMqWc/8xs62cnHuuj+J7ViUp12Wf/N:D1pgoXQpCOj","tlshash":"d893630f77f53472925bb039897f8506b236644b6a4aac187d4c51e81f2c87c52b6fbc","size":93064,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-09-30T18:23:08.349255Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"976bc6e251bf8c2824186c394559d3cf","sha1":"d079f48e00cc211c9d5517c2eb7dc50f7de7d9cd","sha256":"39bba996f8dc980d248534c95c0031136e9ab6077fd67a9e89a1ab2b229047f2","sha512":"d61b5082dc62c8501d7829076140b263cdae99716daefc9fc676c2cde6b26d5e4a9c1bc4b374ecd6bff482340b06695ee0f7668a7df561d9c21829f5792601c7","ssdeep":"768:zcnDsgoEwJ5u+l8vZ+dzTFDw8t3gj1N1wa/TtBWsJlTW/:zcnDsjnJtl8vQ1TBw8Fgj1N1jzy/","tlshash":"2803739a66d0143e5033b32bca7a84a4f2739b3753065e0538fe61a41f794a107b6fad","size":40098,"data":"","first_seen":"2024-03-03T15:52:17Z","last_seen":"2026-09-30T18:23:08.386Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442041,"data":"","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-30T21:04:29.204048Z","times_seen":3185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/79726.eeeee34d57d4c56454bb.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a74f95a196a3366b42c5c51b5df564a0","sha1":"28c6d045960a131749b78eb8e388279c147cb059","sha256":"9eb74ce1a8dffe6d819a6fffa425f1d72110d46ccdf80807aac73d51959fc7f6","sha512":"871dc7e35ae4f99917d621ffc0936a66283939104a1c751c4d52ae5cd5f410918fb60200ab782b8db7e85a6bd80f407a694b6fd4202f66d9d62ba66705b1d203","ssdeep":"192:LzZikEzHIh+TNhlBp6V58F4gzQ40RqCLmnRSMA7IWeGyReFRaqR0COFb5eyo:LzZikEzHy+BhlBp6V6F4hRqCLmnRjcIo","tlshash":"19e1de8239d1f4b961d29d40c16b0845f0195e28b08db8e4e3e7d8c1da7a15ee936bb7","size":7365,"data":"","first_seen":"2026-09-21T17:12:32.472614Z","last_seen":"2026-09-30T21:42:11.021788Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/33390.9fdb0bdfa91fc26b1ad2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d05ca1efd98fd80d089ebaae4c5a28b","sha1":"aa87b946fbd035006319b33be73e604ecab18da4","sha256":"d1432a9c56236e06f81227eba93a1c20ea18bbcdcb3f049c8207f86e46fcf38a","sha512":"cc29598ad7d1f660820208c8d4b22d253e6506bba84481982fdbd5e8bf6e64bea732f0eff76d7711f1f2c8504d782dd47219193ba6af38ff6c7bd797a559ff67","ssdeep":"384:5etN1TgC8Ht9Is99Vzi6qj/XSrmlr+tFpSZ8jdDpClMiQA3DlM:QtN1TgDcsIj/XWm9SA8jdDpClk5","tlshash":"7e927379593edaa66ffe55da183b0c820fbd41433044504976accdec2b447a5f23aaac","size":20425,"data":"","first_seen":"2026-09-25T14:01:43.94869Z","last_seen":"2026-09-30T21:42:11.062308Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","size":11206,"data":"","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-09-30T21:54:54.585514Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","size":4539,"data":"","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-09-30T21:54:54.795351Z","times_seen":762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-30T21:37:37.70368Z","times_seen":762484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","size":3526,"data":"","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-09-30T21:54:54.662769Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/jquery.themepunch.tools.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4250660c7c3b3ac953e21d53947230e","sha1":"49a96448cdb8709462d578ba7854ba583cdf5eb7","sha256":"7ed2879e2997b19587f286f0ba73a3611a907371e71f4f12f109f381c19644b9","sha512":"20690309a319f804927d9c14aeec62cc7bf656d198d7cf535bd3be0532bab7215217525e3b907a62d454e01a33dbbdf5be723ed95195a79df8fe5d1a7e905d46","ssdeep":"3072:PbO0+TaPzmS2hAPkmJaYzLqdSv35a15rpgKccH/Bj3vJQQ32ASxrsK81CZoI62RA:S0IaP52hAsmJaEqkv35a15rpgKcoj/JR","tlshash":"1404524a67d0203a9537f33a8e7fcc06f23a5a6b1355885e792c64e81f3446047f9fa9","size":183718,"data":"","first_seen":"2024-12-18T04:43:11.085925Z","last_seen":"2026-09-30T18:23:08.305224Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bothelp.io/widget-folder/widget-page.js","fqdn":"bothelp.io","domain":"bothelp.io","tld":"io"},"ip":{"addr":"130.193.41.152","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5fec1ef9671f3edd52ea2e39c71e6fd","sha1":"16647fd4bdf5a00adc1ec8c8e63a011c4c3c44c1","sha256":"cfcfde4b8d85463ce4f342eaaf34929889b6ab72d85f0d6d47629b0faf98a11b","sha512":"600f9f6b354f659f05fd40a65967ba28af6d90803e7c240fa46dee163ac6ea044d4114efcca6cac6e8ba5c258b9c8fad108f97c5216568376b1d99367e1510d2","ssdeep":"1536:2p6WB9wxOk6w/3eUePr3al0wCSQE32khiKK+/41/o:2prB9w4GdePr40q","tlshash":"a8932ac172e1f5ed07d390a5543f5501f22d7828b46ae080e769daf06cba5cba123f3a","size":89601,"data":"","first_seen":"2023-05-24T17:05:45Z","last_seen":"2026-09-30T18:23:08.296666Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","size":325187,"data":"","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-09-30T21:54:54.626988Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"\u003e longCodeInit","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439085},{"level":"log","text":"\u003e try","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":439267},{"level":"log","text":"config loading..10","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"log","text":"validation...false","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":254413},{"level":"warn","text":"jQuery.Deferred exception: Stats is not defined@https://crownspring-capitals.ltd/:1076:13\nj@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1197:55\nDeferred/then/g/\u003c/k\u003c@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1203:45\nsetTimeout handler*Deferred/then/g/\u003c@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1208:117\ni@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1092:49\nfireWith@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1129:97\nfire@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1132:30\ni@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1092:49\nfireWith@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1129:97\nready@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1263:107\nS@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1269:49\nEventListener.handleEvent*@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:1271:123\n@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:6:9\n@https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js:7:2\nmap[type:undefined]","filename":"https://crownspring-capitals.ltd/js/jquery-3.2.1.min.js","line_number":1248,"column_number":73},{"level":"log","text":"config loading..500","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":259826},{"level":"error","text":"can't access property \"join\", r.match(...) is null","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":161113},{"level":"error","text":"can't access property \"join\", n.match(...) is null","filename":"https://static.getbutton.io/widget-send-button/js/init.js","line_number":2,"column_number":161113},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.854Z","timestamp":1790792498854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7616\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59463,"size_decoded":7873,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1092), with CRLF line terminators","md5":"e311dfb2bacd0a25231cd9e08ec9a639","sha1":"3acc061aa41b9f416ce7722739aaff4b3a148ceb","sha256":"1e190bdcc22d4f881ec80b05253a67900f02d86ef4994e0b63135659475ac90e","sha512":"fee0671e5bbfc3a8d70347da1222f5d7585479a79c0a1c8910932b2fd87543dd5e93d3fa5e679676d97af7d70b0fe573ddcfa2dbe12d547e04b9b9e18be6f873","ssdeep":"768:isGZuIqJOZXpKWHqVocPy//5QWSvXS6BzP2RKuJV1:izRq2//hvV1","tlshash":"8c433317ab11043a90b3e33a9ab94e1af275873754069cd7377d66700fba02812e5ff9","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.281399Z","times_seen":96,"resource_available":true,"data":null}},"time_used":1726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/animate-css/wow.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.863Z","timestamp":1790792498863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/animate-css/wow.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2879\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11978,"size_decoded":3136,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (493)","md5":"b799b4cf76bb5149a938f4335150a5fe","sha1":"903dccc17af77033fef27f56f9b81b89315b6e49","sha256":"62fe10d2e8d8ebe2c9bc684d5f7f5c13fbd4bf09b24e7ad0739d56f9a2a85bea","sha512":"3d7c638e78ca7eb0f5d9fbb313bfbc4132fe98089188332675c3cef7bfd0f769137090cd710e860da9e76d2c8a411a489143ddabe36c58fe5492ad515762074b","ssdeep":"192:QUBFLA8Ke4CASNlI2k2zoNm2evFsXxyNiEW3Wg7qgfx0wclFwiWB:BpFwWIP4qjisXxyNiTV7qgfxyleig","tlshash":"6032f049bbe62136e707f07ace6f9800b635455f616c8c9c396c91e41f245348abefb8","first_seen":"2023-03-11T23:14:01Z","last_seen":"2026-09-30T18:23:08.282376Z","times_seen":161,"resource_available":true,"data":null}},"time_used":1811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1718,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/custom.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.877Z","timestamp":1790792498877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 282\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1043,"size_decoded":538,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"4572a0f558b134d0f639151f7693e262","sha1":"a6a3a6473b3cef6d86413b80e8defccb7699b088","sha256":"26190c707062fc07dab57efc86f1b590637a6fb7c9758891d652fa926fbc18b1","sha512":"fb0000de760da3659724070e5aa57a412511f4b24466e2067d919cb8049707bfa33d9e5b4b313bcb99e290c68eea3b71fc97ef3ebbf97aaef0c6d99f77373b0d","ssdeep":"","tlshash":"e711a935117684850b3fe0b1121f50255ceaad1be9139b20397e658e4fa1ebc93bd4fb","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.283553Z","times_seen":92,"resource_available":true,"data":null}},"time_used":2406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/79726.eeeee34d57d4c56454bb.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.203Z","timestamp":1790792502203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/79726.eeeee34d57d4c56454bb.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab0d909-1cc5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 21 Sep 2026 07:13:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1067, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8578d64f314168b5f12b0d017092f5d3\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":3453,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3050)","md5":"a74f95a196a3366b42c5c51b5df564a0","sha1":"28c6d045960a131749b78eb8e388279c147cb059","sha256":"9eb74ce1a8dffe6d819a6fffa425f1d72110d46ccdf80807aac73d51959fc7f6","sha512":"871dc7e35ae4f99917d621ffc0936a66283939104a1c751c4d52ae5cd5f410918fb60200ab782b8db7e85a6bd80f407a694b6fd4202f66d9d62ba66705b1d203","ssdeep":"192:LzZikEzHIh+TNhlBp6V58F4gzQ40RqCLmnRSMA7IWeGyReFRaqR0COFb5eyo:LzZikEzHy+BhlBp6V6F4hRqCLmnRjcIo","tlshash":"19e1de8239d1f4b961d29d40c16b0845f0195e28b08db8e4e3e7d8c1da7a15ee936bb7","first_seen":"2026-09-21T17:12:32.472614Z","last_seen":"2026-09-30T21:42:11.021788Z","times_seen":256,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":2,"dns":1,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/NZ.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.352Z","timestamp":1790792502352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/NZ.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"5a0f74e16a6666e570491716f8789d90\"\r\nlast-modified: Wed, 20 Dec 2023 06:32:12 GMT\r\nx-amz-id-2: jbFY3kj8etjmFGOuDJC3Ix0HRAx4pGaUFMbFnV6KQG/xbshIoTnCFnoF11+tvayHVcGhbgYWQK43eRkeGBc2Hf0SVGn6Z636\r\nx-amz-request-id: 0BHHWZ0EA6RA7WZW\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 5a0f74e16a6666e570491716f8789d90\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 718, 830\r\ncdn-cachedat: 09/30/2026 04:52:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 14682eed7f9ac75e9fa6830a8b3e0bd5\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":787,"size_decoded":1354,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (787), with no line terminators","md5":"5a0f74e16a6666e570491716f8789d90","sha1":"30ef3c67bbc2178d38d8c80f916604c7880135b6","sha256":"e99a9149573a35adb03587a50c3af9c0ef7287b7dda403619c23052b782f5311","sha512":"73d509f5e2f359d1c6dbe822a707209c049e0c439dee66ee051fbee68dc2604d1b8b0fecaef061ff987d6394356cfa5d7d419bccf0d7cfcc98c8d8fd130e3661","ssdeep":"","tlshash":"6e016bc1b124c307cd52c21de1781230a06d11d6b0ed55d968e3b75e251fad5fee417c","first_seen":"2023-12-22T15:34:58Z","last_seen":"2026-09-30T18:23:08.285599Z","times_seen":2052,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/parallax-bg.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.266Z","timestamp":1790792499266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/parallax-bg.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/css/custom.css\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 217039\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":217039,"size_decoded":217327,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x490, components 3","md5":"055262a019d282ac5e6ae49ca69e6151","sha1":"accd5ca62a3de642a57433cab68b0aa001137c71","sha256":"480c13aec666ca3bd6e1f3bbb6f4307e00898765082930702933a168d183b4a9","sha512":"d745b1045ca8522ccd2478e3652a4511c906f30149da3c9a2e5655e9df527d400eb6143aa2c9c71ddc2ea56eff90db4165538fe3c42bbc08c90f59eca75b45ce","ssdeep":"3072:pUnI3HQiziecSK9GbAqLiv1wBZXsW2Pm7oynzp9UL1V54I4C6+OEfdcYuDaK6VXJ:d3YPgiv1iiW3oyXIXROEfy2KYSwTAS","tlshash":"9e24125bc8052df0f7e4ed427be7a69304afa57497fa5d9e58831ec3e8a8c8dc900904","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.286927Z","times_seen":132,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3019,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/27293.f8faa3b6bd31cda75e4e.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.179Z","timestamp":1790792502179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/27293.f8faa3b6bd31cda75e4e.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab0d909-197f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 21 Sep 2026 07:13:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fef9d514ecd3a671e24adfb77105b739\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":104436,"size_decoded":14214,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e073017cf9c1b391d210c4b9fcc577a3","sha1":"e64ca377f4e5928676b0e17326cd0cd2584e70e0","sha256":"42ff108c42a64cdccf57df0f48877ac82d80a0115e4db4ac98262e5ccd7043d6","sha512":"33f883473d5122a0eca36db5046d479914af44cceded6d711f0999e05508a2be81780bf8f7fc28c035b0581727a3d30690d11c97cb102172f3e8244aacb4f7be","ssdeep":"768:ywlwokCcAfM0x/2bcVtmUK6oZLP0uGhgiU4v8VvS/AQ2das9:oIVtmUK6oZP0uGhgi1vqa/AQ2day","tlshash":"67a324bcf95191bb5e9b983f4398f6697648f943fd166f86bf00c00020c6ee710e5a5a","first_seen":"2026-09-21T17:12:32.500522Z","last_seen":"2026-09-30T21:42:11.010186Z","times_seen":265,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":7,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/95350.2a70d397c34f2e9de94f.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.188Z","timestamp":1790792502188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/95350.2a70d397c34f2e9de94f.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6aa8e1da-37f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 15 Sep 2026 06:12:42 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1069, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: edf376f086fa5d5d264675eb317d44e6\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":1153,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (895), with no line terminators","md5":"61ab7674e7397acc0fbdbd8b60e6843d","sha1":"fcd3f559f2622c63283e4bc9c57d10811df0e449","sha256":"6612bc0b7ab79c16fbd208e005ce64f38027f232bd2fc73621c14c2401cc1abb","sha512":"25a6b08a102f5c8bd5cd31c69e9e714962ab697d5d0b27c3d6ee50b77232d869dc271761eda4f53d91748de07f2e4798911326e27fef8995b5be37d735ab9188","ssdeep":"","tlshash":"3811293871a06d2c7312ee3c17686c8c795da26ca6835eceead07128479f2cc26720a0","first_seen":"2026-03-24T10:46:27.428699Z","last_seen":"2026-09-30T18:23:08.289432Z","times_seen":6802,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":5,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/62851.4a20be41fac85f76ced3.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.206Z","timestamp":1790792502206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/62851.4a20be41fac85f76ced3.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abcdbc4-1204f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 30 Sep 2026 09:52:04 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 11:28:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ecfdcfc24a70b4ed4894212be9c737aa\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":73807,"size_decoded":23811,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13214)","md5":"2428972098d3c4a46cf30544709ec071","sha1":"171f56d5429b2e15994a48e6a9988b914b6db455","sha256":"0ebf37333f51aff2bfae1e7b9cb1465b000e47a6d5d9e98c033156fbed0d6e05","sha512":"968b7a537a7364959e5cfda210e3ee36c94dbc565329dc8e13c4c1b1f1c27aeb55cc9076e3cd14ff596d7a8637b14383dabae0a8147f3048a5aa1d99fef7766d","ssdeep":"1536:Sps5O1Tuc2kGyeZ39xTEK55a8J8TRRcPCpsW5xaTeKgGZJgwSFCHvV+P3zoJZdmR:SXlWyQboOTxZQFiysDxQ","tlshash":"a8732952e16764739bd2827af4323203e2ac0465b8050c78babc5dde1d9d9c57273fba","first_seen":"2026-09-30T12:24:41.289639Z","last_seen":"2026-09-30T22:08:59.765215Z","times_seen":11,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":4,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fforex-heat-map%2F\u0026date=2026-09-30T20%3A04%3A48\u0026page-uri=crownspring-capitals.ltd%2F\u0026ancestor-origin=crownspring-capitals.ltd\u0026api_key=tradingview","fqdn":"widgetdata.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"5.101.223.89","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.267Z","timestamp":1790792502267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Wed, 18 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"96:06:76:35:9F:2C:2D:1C:89:55:E8:92:7C:4F:4B:FD:E9:F6:FF:1A","sha256":"BC:FA:33:CE:19:85:7A:43:44:BA:17:CE:87:15:42:E2:02:0C:7A:4E:83:42:1F:58:8F:59:B4:20:BF:4B:35:00"}}},"request":{"raw":"GET /socket.io/websocket?from=embed-widget%2Fforex-heat-map%2F\u0026date=2026-09-30T20%3A04%3A48\u0026page-uri=crownspring-capitals.ltd%2F\u0026ancestor-origin=crownspring-capitals.ltd\u0026api_key=tradingview HTTP/1.1\r\nHost: widgetdata.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.tradingview-widget.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: NA3jj/sJgygDMncsAqmkKQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 30 Sep 2026 18:21:42 GMT\r\nConnection: upgrade\r\nsec-websocket-accept: 028Cv6OOhWJ+9fbiQHtb0yMZ/MQ=\r\nsec-websocket-extensions: permessage-deflate\r\nupgrade: websocket\r\nServer: tv\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":3,"dns":6,"connect":16,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-data-impl.cd9336f80594f1653caf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.416Z","timestamp":1790792502416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/tradingview-copyright-data-impl.cd9336f80594f1653caf.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abcdbc4-1002\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 30 Sep 2026 09:52:04 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1348, 830\r\ncdn-cachedat: 09/30/2026 11:28:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 233d514b737edc5ba72f194715ec344c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4098,"size_decoded":2963,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2098)","md5":"f183361a6066be1b57a42e9ff5e6f1cb","sha1":"aff1eceb129addefa1aea9d2b415ecf1a435c951","sha256":"0c7a379143f68e1703fba873a476b3dcc66984e0cad7dd3f9753b4f17a853498","sha512":"cd8d51e4b536b40f08b30cb43c5d7d52e83ebbb0ee85c42c5db04072cd9c9356d15c9d3520d423be40501ea91cbb5244912b4de79f013c07e25cb4c8589ec8a5","ssdeep":"96:0hbEp38HaYJtrBmFnBHr2s6twCAftFa9wU7KLD5XUn+:UbEqrByntrFq5AOKtm+","tlshash":"ad8174462641a5cc2293c878dc3e15e4621f69fd728f53e0fab7ce30e4839d5a996d2c","first_seen":"2026-09-30T13:46:39.695104Z","last_seen":"2026-09-30T22:08:59.809588Z","times_seen":11,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.968Z","timestamp":1790792504968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"792fff828f71afcb92d017b5421e20e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc409022efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13016,"size_decoded":5413,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11094)","md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-09-30T21:54:54.53598Z","times_seen":272,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.counterup.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.860Z","timestamp":1790792498860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/jquery.counterup.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 935\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3992,"size_decoded":1191,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e788a1f7bf3b5b872ca8e74b78d07d67","sha1":"a37295eef28f9bd45cf6ae11c505b6c0e889659c","sha256":"6e21813f29d1fc5f161e7141d07caec46261268a60a69d2b0f4b8c7a2a1783dd","sha512":"cd11bf814622c92fe346563cabc106068ac26b54d6e8387bb9ffb80989915e7d8138eeb1c01f9e7026a87ef7beed35b15d6bdcc6a0c860ddf54bed51fe7eabbe","ssdeep":"","tlshash":"6881672a6c7b18882e63f17d675f32546332b51b0414dc0eb99c51801f86a3d93e6fbc","first_seen":"2023-03-26T11:16:32Z","last_seen":"2026-09-30T18:23:08.295367Z","times_seen":108,"resource_available":true,"data":null}},"time_used":1718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/84941.3ce7f18ecebabfb86c97.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.192Z","timestamp":1790792502192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/84941.3ce7f18ecebabfb86c97.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab63728-157e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 25 Sep 2026 08:56:08 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1029, 830\r\ncdn-cachedat: 09/30/2026 05:22:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2c8b8cd8d5f5e3f905da90cbe31e0682\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5502,"size_decoded":2115,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5502), with no line terminators","md5":"8d6601ebe6e40574e80d9f8b41334870","sha1":"bf0a7196c5469ff46d8acc587cad4db1f12e2038","sha256":"c1b4c7067517b58d9c33d0c2259ef979e3dff30c8d9dbbf07d26cf9e95e6ad44","sha512":"04ed1c386ba556bba947f1c4c3ca3e55474aba6277304db47b8431b0ea3c3b9d3a2378726b637f4f54972a1493672e9afb14764b6a5d1647517d1c1af4665064","ssdeep":"96:DyLopUzJaOWmB0fAoJlv9qSIJs27nihll9ZAL0RobcOVuy3EQyvWImcqVuJUfZQP:qcUzOK0fAo3tIV4Ul7IUfZQc99cj6Q/7","tlshash":"5eb10078e516b1a97c7fb12e6378c5886429b2c6cd01cff9f71ba13082d1adba962504","first_seen":"2026-09-25T23:52:28.802043Z","last_seen":"2026-09-30T18:23:08.296053Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":6,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bothelp.io/widget-folder/widget-page.js","fqdn":"bothelp.io","domain":"bothelp.io","tld":"io"},"ip":{"addr":"130.193.41.152","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.261Z","timestamp":1790792499261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bothelp.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 08:43:26 GMT","end":"Sat, 03 Apr 2027 08:43:25 GMT"},"fingerprint":{"sha1":"59:E0:64:80:D4:1B:EA:D9:1F:A0:C0:42:AA:1C:C5:59:9F:F7:7D:4B","sha256":"B7:0D:48:C3:22:EF:3F:9E:6B:CC:7E:7D:1C:51:80:4D:6A:8D:78:7F:74:52:03:50:C1:AB:A4:09:6F:6E:D7:64"}}},"request":{"raw":"GET /widget-folder/widget-page.js HTTP/1.1\r\nHost: bothelp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.0\r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 22962\r\nlast-modified: Wed, 23 Sep 2026 12:44:19 GMT\r\netag: \"15e01-65c25d788ef73-gzip\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nx-cache-key: https|bothelp.io|/widget-folder/widget-page.js|br\r\nvary: Accept-Encoding, Accept-Encoding\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89601,"size_decoded":23412,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f5fec1ef9671f3edd52ea2e39c71e6fd","sha1":"16647fd4bdf5a00adc1ec8c8e63a011c4c3c44c1","sha256":"cfcfde4b8d85463ce4f342eaaf34929889b6ab72d85f0d6d47629b0faf98a11b","sha512":"600f9f6b354f659f05fd40a65967ba28af6d90803e7c240fa46dee163ac6ea044d4114efcca6cac6e8ba5c258b9c8fad108f97c5216568376b1d99367e1510d2","ssdeep":"1536:2p6WB9wxOk6w/3eUePr3al0wCSQE32khiKK+/41/o:2prB9w4GdePr40q","tlshash":"a8932ac172e1f5ed07d390a5543f5501f22d7828b46ae080e769daf06cba5cba123f3a","first_seen":"2023-05-24T17:05:45Z","last_seen":"2026-09-30T18:23:08.296666Z","times_seen":55,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":4,"connect":67,"send":0,"wait":100,"receive":87,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/price?fsym=BTC\u0026tsyms=USD,EUR,CNY,ETH","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.875Z","timestamp":1790792501875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:14:41 GMT","end":"Wed, 18 Nov 2026 02:14:37 GMT"},"fingerprint":{"sha1":"B9:AF:DE:4C:74:4C:4D:7C:9D:1C:C5:5F:A2:D7:5E:D2:22:11:41:C9","sha256":"FA:89:5F:37:B0:D9:87:3E:03:E6:D4:DD:CD:EB:B4:B5:55:50:5E:D5:9C:31:3F:75:C2:37:96:6A:D7:6B:96:12"}}},"request":{"raw":"GET /data/price?fsym=BTC\u0026tsyms=USD,EUR,CNY,ETH HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __cf_bm=6q019CdG3JTzAhgA9IhBF.TgbVoPs696qknkIx9aVaE-1790792505.032153-1.0.1.1-4P3eNlq74tfOLUBponS756Ahr4YkRj0cjXASInXmtYm_2D5kYNPNQgIM.epBsKkiUVjNLmT5t.AhhpqOenW4VhMtlI0We9vThIcXoi9l2dAj.SXN_6is7z4jMpdSg0Y1; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Wed, 30 Sep 2026 18:51:45 GMT\r\nserver: cloudflare\r\ncf-ray: a4353fc46b6056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"6q019CdG3JTzAhgA9IhBF.TgbVoPs696qknkIx9aVaE-1790792505.032153-1.0.1.1-4P3eNlq74tfOLUBponS756Ahr4YkRj0cjXASInXmtYm_2D5kYNPNQgIM.epBsKkiUVjNLmT5t.AhhpqOenW4VhMtlI0We9vThIcXoi9l2dAj.SXN_6is7z4jMpdSg0Y1","quoted":false,"path":"/","domain":"cryptocompare.com","expires":"2026-09-30T18:51:45Z","raw_expires":"Wed, 30 Sep 2026 18:51:45 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=6q019CdG3JTzAhgA9IhBF.TgbVoPs696qknkIx9aVaE-1790792505.032153-1.0.1.1-4P3eNlq74tfOLUBponS756Ahr4YkRj0cjXASInXmtYm_2D5kYNPNQgIM.epBsKkiUVjNLmT5t.AhhpqOenW4VhMtlI0We9vThIcXoi9l2dAj.SXN_6is7z4jMpdSg0Y1; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Wed, 30 Sep 2026 18:51:45 GMT"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":273,"size_decoded":972,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-09-30T18:23:08.297408Z","times_seen":132,"resource_available":true,"data":null}},"time_used":3164,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":11,"receive":0,"ssl":3147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:45.107Z","timestamp":1790792505107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0255582e599007d621a42129d7d27f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 468396\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc4ed405696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18387,"size_decoded":4687,"mime_type":"text/css","magic":"ASCII text, with very long lines (18387), with no line terminators","md5":"e0255582e599007d621a42129d7d27f5","sha1":"7558586a6dfc7f897c6115afd54699f13e657fdc","sha256":"d85c5684bc2ca8b6dfac3e8c95320e22afadf8adb1a923b11a52465c49a00b0e","sha512":"7213efe6431739a3539e9d9c386cf2b623ee42381078447ed1083324268f49aec93e5eebdb7a4c16717e79be0e6b06594a7a801435a054535f243a2143a4519a","ssdeep":"384:KBMbrYbv+esY2jFWlnrCxN82TNSixi7rXt:UUAXt","tlshash":"2d82da93b9e314dce657c632c0e1f67ca83f4a20c757c5a3a9437bb98681ad73641a4c","first_seen":"2026-09-14T08:43:43.711999Z","last_seen":"2026-09-30T21:19:11.348895Z","times_seen":552,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/AU.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.349Z","timestamp":1790792502349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/AU.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"ffaa89557725b51eb58753956db0a148\"\r\nlast-modified: Wed, 08 Sep 2021 09:02:00 GMT\r\nx-amz-id-2: IlC+jk++PanBBV7RL3hDxSKRBvbe9xX3Td9NEpMS6Xnesf6ObAMo0wDE4xWT5wqG672R/ajC1t09otoCONKAEOEhLhA67J9y\r\nx-amz-request-id: 0BHN5RXFSBNEE6MV\r\nx-amz-meta-hash: ffaa89557725b51eb58753956db0a148\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 940, 830\r\ncdn-cachedat: 09/30/2026 04:52:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fa555adf9a48c9e71451d1ca8e9cbf98\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":937,"size_decoded":1358,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (937), with no line terminators","md5":"ffaa89557725b51eb58753956db0a148","sha1":"af4c43200c5a85ad2d525412bf83e55e90138bd3","sha256":"27c815d48181359be416f858593d35e363b546bf3f237e0458cccf01fefbdf30","sha512":"012df6822dab500101b05a391d897c6523bcc4e1f7f65ffce67f4ff4a87b520380c8c4b2cd0b5f2f6ce718fdc7422facea451a03893b5f611af0b68a10275c10","ssdeep":"","tlshash":"95115b85b154d25bcd42ca2dd2381230a25e61cab1ed66c8ace3b35d291fad9fdd40bc","first_seen":"2023-05-01T20:32:00Z","last_seen":"2026-09-30T18:23:08.298765Z","times_seen":3030,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/css/navigation.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.812Z","timestamp":1790792498812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/css/navigation.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6670\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63050,"size_decoded":6999,"mime_type":"text/css","magic":"ASCII text","md5":"19aebe89e55a62e094d18335f7afd5aa","sha1":"b892e839397cb3aa8589fd55886d75629d28d44f","sha256":"6a7d7417d9a6523057113681b088b18f37c015bc367fdc914c19fa6b09f4f05a","sha512":"35bc4e43f21935b89a4f5ad21ea7c4cd10d8220d91a28674961013ee2db3c0f9c37a15158e96c8123cd0f7a490d909987516ecc90e092a196a8c0a3efc8954bf","ssdeep":"1536:GSq9+T+P1vf6Y0hvERX+zCoT1z7zzlkOt6XiDHOuv6pJUAEjQj:JSvSPvGX+zXhzAeHRv6D","tlshash":"2f5383a99e931140b127c5985fea8768e33e8013e446c8adb7c272cdcf055d891bebcd","first_seen":"2024-12-18T04:43:11.028089Z","last_seen":"2026-09-30T18:23:08.29941Z","times_seen":83,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/custom.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.823Z","timestamp":1790792498823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2950\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13093,"size_decoded":3279,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"81d883c0c69d4f831e13186469b9e991","sha1":"096f9971a99182fcca1f0e801f88968dea1e9d5c","sha256":"28fb5d787057fe314c9b87fb2c231aa288503bec45999eb6b7107adbf7cc9dfd","sha512":"edf72e2f85462d06d5bebe1dbe4b31d3d02bc213fd0684672bb8f523ab14c99f54edc7f451e1cc40ab7b066ef9bf5eb67236e1f4673c60c0aa44cda5b26058ea","ssdeep":"192:inWgfkUtOUtYDG34aGWjKPN849k8c+isLtm5x021cMDN3kh7WPLHaS:i5h87Ijhl+ie8096","tlshash":"a14201836af31c45b40b99946bff9394623c5083aa0fde6c7f9932589f492e45162f8c","first_seen":"2024-12-18T04:43:11.039032Z","last_seen":"2026-09-30T18:23:08.300047Z","times_seen":45,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/scss/_banner.scss","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.825Z","timestamp":1790792498825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /scss/_banner.scss HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Sun, 28 Dec 2025 04:53:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1102\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1102,"size_decoded":1323,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"03bf18637840b20aa36579247a1aa5bc","sha1":"ae0adfbfe7b6d907833a13c2ec32308dffeeda87","sha256":"6c3e450b7d7e656ce792d51a1d63c6bfedf558de1c3eed992ae07b86b104bdc8","sha512":"2db2f7d4763f6c172782d6675ec17635bc3cfc50e19ea40a49f9167d69ca12aea8dcc0f0ddf4e275aef5920bab53f0e671627e2dab24a6c462d83b8143f44e0d","ssdeep":"","tlshash":"f7112d4ae9770455b807e86c67261b990169b407d40dca2c3b9cb249cfa83bca5d6b8d","first_seen":"2024-06-18T09:42:30Z","last_seen":"2026-09-30T18:23:08.300576Z","times_seen":86,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.829Z","timestamp":1790792498829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 585750\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 07 Sep 2020 12:33:38 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZufOIDPggUpuxHvpABhiPkNk0cqIcW3fctzxC%2FWKQaMS8%2B0RIX1JTgio9eC7NOV7cQmHs%2B%2BzohCbo8UlboFogD9E5P8RYnDyivB7MVOa3AZ%2FzDQe9vS%2FsMAlIt1pJbZtOGpXre7j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4353f9ddbc8b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71750,"size_decoded":5225,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-09-30T19:47:17.68896Z","times_seen":33657,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/owl-carousel/owl.carousel.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.862Z","timestamp":1790792498862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/owl-carousel/owl.carousel.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11894\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":58009,"size_decoded":12152,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (933)","md5":"348605eec23f4b9453f47ac36252aee7","sha1":"4678a2d55db84d3d4f5b866c823d636d4fd28fd1","sha256":"a9310673426df68492975f744a9e1d52811dca138bfffa78eae348d6c7e21b7a","sha512":"168c85f29af8fb1f9e21c9f70c195dafcc7d3eacc3d329af96df381cd5474bc1248849b41e13139126380ac48bfa446d3b320af743958bca25444905cb922ec3","ssdeep":"768:/oHrL3BMEwlM9bEbTkGbqIPpfEdg7iB3n8W/byUMR2bZA96ZWb2/+WDS1KKNYQAA:AHr7ylM9wZlPmywgwmKKNYzdH1Yeuv62","tlshash":"b5433e0aa3f0182b8657b0605e7f9a067236441fd549ad9c3d6ca2dc1f6c47806befbd","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-09-30T18:23:08.302345Z","times_seen":170,"resource_available":true,"data":null}},"time_used":1811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1718,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/theme.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.872Z","timestamp":1790792498872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/theme.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1474\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7900,"size_decoded":1731,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0873d945ecd81a89e17c1bcffb888ac8","sha1":"8fd5bab3060d3c7e6a8fa51065344fadca548ae3","sha256":"c899045f0a8629c822b5fdefed2fa1fc37dfb32a96be248ed652de46278528cf","sha512":"bec2772130e3f4e0fb3bcb7d3cdd2dbc9f39d1d9eae39eb0d296144fa96c0d350fd481ac6dc848584b8ea4c89a3cae21b4aef45ca7372f85e9bbb30eddf7717f","ssdeep":"96:L2c1zkM51g8xkARCK/apIJqMWMsdU42KYFOygZebqLId9:Rzky1zPRCevTWMsdU42KYFOygZeR","tlshash":"53f1eb0aadd110669477f7389faa5608ffb1432f8242d893bdbc16a45f3221a515efcc","first_seen":"2024-12-18T04:43:11.076224Z","last_seen":"2026-09-30T18:23:08.302928Z","times_seen":67,"resource_available":true,"data":null}},"time_used":2408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.915Z","timestamp":1790792501915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:21:41 GMT\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":2347,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"110e0aca6ca30b48bfdcc77c30eeb6bf","sha1":"21ee214ed15b2a4e80a4dc7131fa3fff5c141e9f","sha256":"0e02306b564f44631f56bcb6470cc16776743354779ebe283caf45ef7b447073","sha512":"38b6b3ecce638611cdf1aeb23ac77dda220a4d3a4c4a76119bc0c7a10427c4b984398ea785d0d003c9174b33da66388c786fed2ecff7421b26a4f799f8dff71f","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/E:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"307210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-20T02:54:07.842809Z","last_seen":"2026-09-30T18:23:08.303522Z","times_seen":1615,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.830Z","timestamp":1790792498830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 584984\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 21:52:53 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW5C470Z4gmZiwL4%2FUWENdV8OyEZPuDFfqFyCcxav8AJK07%2FhAVLR321G1Gt5Q6rvTUcYcCWyKTzGnQ9JflifTT4Z0q7hOdsbhkB%2BcMliRBwFh4sopJIZpS0di6en5mUS%2FzSt6MX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4353f9dddac1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59344,"size_decoded":11488,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-30T21:42:42.914334Z","times_seen":117612,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":3,"connect":20,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/jquery.themepunch.tools.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.847Z","timestamp":1790792498847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 42140\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":183718,"size_decoded":42398,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (525), with CRLF line terminators","md5":"d4250660c7c3b3ac953e21d53947230e","sha1":"49a96448cdb8709462d578ba7854ba583cdf5eb7","sha256":"7ed2879e2997b19587f286f0ba73a3611a907371e71f4f12f109f381c19644b9","sha512":"20690309a319f804927d9c14aeec62cc7bf656d198d7cf535bd3be0532bab7215217525e3b907a62d454e01a33dbbdf5be723ed95195a79df8fe5d1a7e905d46","ssdeep":"3072:PbO0+TaPzmS2hAPkmJaYzLqdSv35a15rpgKccH/Bj3vJQQ32ASxrsK81CZoI62RA:S0IaP52hAsmJaEqkv35a15rpgKcoj/JR","tlshash":"1404524a67d0203a9537f33a8e7fcc06f23a5a6b1355885e792c64e81f3446047f9fa9","first_seen":"2024-12-18T04:43:11.085925Z","last_seen":"2026-09-30T18:23:08.305224Z","times_seen":68,"resource_available":true,"data":null}},"time_used":1733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1635,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.waypoints.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.312Z","timestamp":1790792501312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/jquery.waypoints.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2971\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12878,"size_decoded":3228,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (644)","md5":"8f20942241958400468848972e6e322b","sha1":"196b56b86596763b5213e181b96f91f1549e9cc7","sha256":"3c57aa21470e7dc530838c84c81a7357f067fef9d16e962b1b266d4d375692ea","sha512":"6458d845477c4847e2ced666fb4219bd077efc9955a150c1cf4ff3bd40785e73a862725cf304c0246ec49b8b95949829f33ed2f3e8a824323876f005de871975","ssdeep":"384:mEAsHfr7cgiFHw8P9FaYMEgy6yDTtiduidQc7qO9BuKq59/hlzto:m4fr7q9DqXWqxq59/hlJo","tlshash":"894202096ff52422a75bb079dd0f96097335841f654a9c25388c92d80fb703c5bbafad","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.305966Z","times_seen":130,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/CN.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.353Z","timestamp":1790792502353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/CN.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"8ea3ac67cd773a94323070920d5a3794\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:42 GMT\r\nx-amz-id-2: oDR4Kjjv4ROjRaJxY7/E2wcWn9rtrAuQagYmTnpEAioozP/YWEDebqpyqLYUa+LrAcOg1dBhMiQ=\r\nx-amz-request-id: 0BHK5YT5KHTE5Z7X\r\nx-amz-meta-hash: 8ea3ac67cd773a94323070920d5a3794\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1348, 830\r\ncdn-cachedat: 09/30/2026 04:54:22\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0b747e771ebc07dd7c388a2208b6f27d\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":434,"size_decoded":1214,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (434), with no line terminators","md5":"8ea3ac67cd773a94323070920d5a3794","sha1":"530c18f6cbd795cbc9603ad8d0740c0bbf1bf9c3","sha256":"991251c6f527ed5af6ffe76e6d8b63435ea972f986ef4a5d8908fef5fa9214fd","sha512":"9e88eb57174e856d0cf51d3db2aef61502ad90df3b981fe05abea4bb7c0ef5e4933026e7e179dc6dfa6d244ad662a17548d9e46465aa220278c5958fd5e399eb","ssdeep":"","tlshash":"f1e0ab29762ec21c850bc61decb81812750f64dae38f9aedf08257e079c0dd7d821e9c","first_seen":"2023-05-01T20:32:00Z","last_seen":"2026-09-30T18:23:08.306881Z","times_seen":1720,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-66332255-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.711Z","timestamp":1790792502711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=UA-66332255-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nexpires: Wed, 30 Sep 2026 18:21:42 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 30 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 136365\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":387136,"size_decoded":137015,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5124)","md5":"4ffd1e16e41bc79cd1e2d24f326bcafc","sha1":"73fcfbe6f1ee82402a8dbe8932e20633b1a1d6d8","sha256":"f0cea669710bc8b7bbacd85912965dcabf535a77a519e8a58d3fdf2d55cead81","sha512":"b2b02b737d30a612e4d1c2ff6a43c41d636140078cddf46dd84036d7ba7036c836e600c0c56f4e736a43540ea92cbcf7eab10ce99b49cddf52ec12f269e3f29d","ssdeep":"6144:ml/EmeGKjyGr77mlYHugcK7s99Ob4EBG3CpNOdq3N2+eztZ:RoGaS57s9sOda2P3","tlshash":"2a8419ccb3d6b42283a2b578503f018bb27a69d2f84cc899f246d8d42d3469a5177f7d","first_seen":"2026-09-30T18:20:33.019666Z","last_seen":"2026-09-30T18:23:08.307493Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":47,"receive":61,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.832Z","timestamp":1790792502832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"493ec326a306857e053b535118af1c2e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 147\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fb6bc242efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11724,"size_decoded":4419,"mime_type":"application/json","magic":"JSON text data","md5":"493ec326a306857e053b535118af1c2e","sha1":"97f86770a684f19cd83aa09b4a4bc6ec36a6bc4d","sha256":"913049c2bf5844e4c5ca76465bb8270066a409cc5c883f849ebc43bc2a7352ff","sha512":"908e18919f2f0c87e24aaf1ef30610ac22b730b33ab27e796b69ec531f6b19850b3f98b261e150e4bcdcca4f504ccce1071602460be8a5255dca2a04f69c08be","ssdeep":"192:Om265/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:4CbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"e8323169ce504ea702d29646389f35437624819b1f54382eb78c91ac0f8ec6f62f77ce","first_seen":"2026-09-24T04:33:32.436701Z","last_seen":"2026-09-30T21:54:54.571725Z","times_seen":391,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.838Z","timestamp":1790792502838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://crownspring-capitals.ltd/\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-dmp6\r\naccess-control-allow-origin: https://crownspring-capitals.ltd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: a4353fb6cc282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":722,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/owl-carousel/owl.carousel.min.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.814Z","timestamp":1790792498814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/owl-carousel/owl.carousel.min.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 871\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3645,"size_decoded":1199,"mime_type":"text/css","magic":"ASCII text","md5":"2a223dd7549217f8f68ef5144aee8206","sha1":"0de42efe4c8e3670a6f20d5e806bda59d1a05c88","sha256":"891f62a4386a5824f4bff88e7762e5bfd494f3c69f3fcf2efc10e4d13e9e9075","sha512":"7032a7098b3d7c23381b64cabee0c44e9960237f0fdea419daf52f9a55e8e3c7ae1f132c3fd5162069c6034e3e9f2200c932567bce22cd00b05fdc0d8028cab8","ssdeep":"","tlshash":"b67197e42577190e680e83a40fed4f2a343e889388099858b6f7570a5f8ee5c515ff6f","first_seen":"2024-12-18T04:43:11.029557Z","last_seen":"2026-09-30T18:23:08.310872Z","times_seen":87,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:43.069Z","timestamp":1790792503069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 10:14:09 GMT\r\nexpires: Sat, 25 Sep 2027 10:14:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461254\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":2072,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-30T21:52:08.674635Z","times_seen":34421,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.996Z","timestamp":1790792504996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"a5911fd0628b3cf5cec05686e05ab9d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc439142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":3918,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4572)","md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-09-30T21:54:54.803744Z","times_seen":780,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/flat-icon/flaticon.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.806Z","timestamp":1790792498806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/flat-icon/flaticon.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 395\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1585,"size_decoded":723,"mime_type":"text/css","magic":"ASCII text","md5":"fcaeb85ae357b578adffdc776db7c6cc","sha1":"f49bbb64f108ad14202dc38c74e5f12c45182c42","sha256":"371ebf61d324317b69e2fa7ab4e8477d505be25e4aa1f2c711d8c3aefb84c705","sha512":"cd92067b3d577c65817e0d08983fc0e9422dccd16cc95e05892bef2c18e8441c00e78db59c123b5b471641558b07a2e378954db23abf1d3e57f234a10c1f3d42","ssdeep":"","tlshash":"ba3180584e7a4440a3619f481b9e27d2a734b42a4dc48c49e215ae6cfff2d6083d5bad","first_seen":"2024-12-18T04:43:11.022348Z","last_seen":"2026-09-30T18:23:08.323491Z","times_seen":46,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/nice-select/nice-select.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.819Z","timestamp":1790792498819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/nice-select/nice-select.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 877\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3909,"size_decoded":1205,"mime_type":"text/css","magic":"ASCII text","md5":"c2e46afbe65d3cac302e5db87abde51b","sha1":"537db50178467b86ad89ee676e8ffe9443a4fc81","sha256":"9d0ac96cb67cbd12672f78d7b6ebbf3ade3190bda4f178a22a3626c44cdfd30c","sha512":"d653d8169bcb762500c00165ee950810431054be48e54d6ff61d1e6b5a3c7b79d17ff5f379473d4ee63768b38a89f0355562377eb01b380dbda82558e197d3af","ssdeep":"","tlshash":"f78105799a531942642e876fafdb6b18233dc0435426dc6cb7c1960b0f0e69c8cd6b4b","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.324182Z","times_seen":198,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@10","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.832Z","timestamp":1790792498832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@10 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 10.16.11\r\nx-jsd-version-type: version\r\netag: W/\"11dc8-k2jefS6LDTNa26qxcRQ+MH7V+1Q\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\nage: 16208\r\nx-served-by: cache-fra-etou8220190-FRA, cache-bma-essb1270076-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19921\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73160,"size_decoded":20701,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48449)","md5":"78f9abf2d03f7ee6a755e0178d41f2f8","sha1":"9368de7d2e8b0d335adbaab171143e307ed5fb54","sha256":"2d5fa531e30ac3debad673003128f1ca9ad3c964ef17b547377e7ed09bd4504f","sha512":"c138cdbcc824524cbd5cbfa8edf966acf66462916349a5d9539723c6f5f10f44357059cc28ddbb95d50d3e17710e9f533bebb658d82527d980804b8a3a31f9d1","ssdeep":"768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9","tlshash":"ce630689b6403133aaab4174659be60db6b56515fc330c18f128d0d84ffbd8e6273bb9","first_seen":"2023-03-08T15:12:56Z","last_seen":"2026-09-30T18:44:18.888841Z","times_seen":2349,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/service2.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.892Z","timestamp":1790792498892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/service2.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1602479\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1602479,"size_decoded":1602768,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=3777, bps=0, PhotometricInterpretation=RGB, description=A man walks near the New York Stock Exchange (NYSE) on August 31, 2020 at Wall Street in New York City. - Wall Street stocks pa, orientation=upper-left, width=5655], baseline, precision 8, 1750x1250, components 3","md5":"cad648abc2f048120bd8301f97214535","sha1":"550b76afb6aaff3770e2e8d6d0a26ecc6eda220a","sha256":"c4258ee996cfb629968512044bfd8cdfad9664a375a8457cf5af5628d5da2830","sha512":"3a13341125b6e734ac28570e2fccad76d48ef8fef37570ec4f83e964484c897897c7594b051fde80d1994a67448912c93c0a235ffb644c0d7387e89f9f9c10ec","ssdeep":"24576:6+8F5IG56S/AbplKfeSbSf/w6y3ySW3eOT2:E4ZRS+X8CS8eR","tlshash":"9425333209285ca1f48c5131938d88c56b7a80eaa9e6e7c473ec772527556ea7c3d3cf","first_seen":"2025-08-02T08:49:58.532959Z","last_seen":"2026-09-30T18:23:08.325516Z","times_seen":104,"resource_available":false,"data":null}},"time_used":2798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2391,"receive":407,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.116.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{f8caab3a-57dd-4691-9d8c-7e9a00aa68b0}?https://crownspring-capitals.ltd","date":"2026-09-30T18:21:42.714Z","timestamp":1790792502714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvoBCAESrAEBOxGDSDu0j0YMlMfO16I7BDaXEZtkK07TZKX1K0BLh_sC8_h68I5HIszUNgWf_DLLzPlu9PlBACPpF0eDViHC78r0ed1hoIdmhqS_AMQI6FWh99EM3SuZhdWmSCfuE2vz12YHMy0eMdsZwWyXUhFDQmbaXu8uuZb4T6vlTT_Gz_nmsoSeYHTR4mVvzjagT9hfI2muBBJK8os2-3DWVbm6TEOAn8q2xti2n51hKAEyRQHSrAfPBEvz7_uXpbeTONoKDhfFRAPA4AQNl2-_fHwVIGC1bSvQdsq_2j5_C4g2XC1u5DcQREhpUN_80rwAfdteow-ODQ; expires=Thu, 01-Apr-2027 18:21:42 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Wed, 30 Sep 2026 18:21:42 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvoBCAESrAEBOxGDSDu0j0YMlMfO16I7BDaXEZtkK07TZKX1K0BLh_sC8_h68I5HIszUNgWf_DLLzPlu9PlBACPpF0eDViHC78r0ed1hoIdmhqS_AMQI6FWh99EM3SuZhdWmSCfuE2vz12YHMy0eMdsZwWyXUhFDQmbaXu8uuZb4T6vlTT_Gz_nmsoSeYHTR4mVvzjagT9hfI2muBBJK8os2-3DWVbm6TEOAn8q2xti2n51hKAEyRQHSrAfPBEvz7_uXpbeTONoKDhfFRAPA4AQNl2-_fHwVIGC1bSvQdsq_2j5_C4g2XC1u5DcQREhpUN_80rwAfdteow-ODQ","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-04-01T18:21:42Z","raw_expires":"Thu, 01-Apr-2027 18:21:42 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvoBCAESrAEBOxGDSDu0j0YMlMfO16I7BDaXEZtkK07TZKX1K0BLh_sC8_h68I5HIszUNgWf_DLLzPlu9PlBACPpF0eDViHC78r0ed1hoIdmhqS_AMQI6FWh99EM3SuZhdWmSCfuE2vz12YHMy0eMdsZwWyXUhFDQmbaXu8uuZb4T6vlTT_Gz_nmsoSeYHTR4mVvzjagT9hfI2muBBJK8os2-3DWVbm6TEOAn8q2xti2n51hKAEyRQHSrAfPBEvz7_uXpbeTONoKDhfFRAPA4AQNl2-_fHwVIGC1bSvQdsq_2j5_C4g2XC1u5DcQREhpUN_80rwAfdteow-ODQ; expires=Thu, 01-Apr-2027 18:21:42 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3612,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-30T21:52:08.668033Z","times_seen":29147,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":36,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/bootstrap.min.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.808Z","timestamp":1790792498808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19630\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166975,"size_decoded":19960,"mime_type":"text/css","magic":"ASCII text","md5":"2b20bee62d5e3b5c399632f8050bcfac","sha1":"0c810fa712c2c9c28e6925ebe9ab8aef7ee847f3","sha256":"ee2b840b245ba90072dcc2cff83125d8e839e5cd1b4d7f14361bb38ea4a5ea9c","sha512":"f247057b663f9fa1df6b932347c39869bf357a09b9666095bc28bcf9f5d298be373983b19ed73892d2d5fa9fa8353493453cc641287e35f9432e0b08c7991f54","ssdeep":"1536:DrimBMSJ7NQG4CZksYSW2t8yN3UtusKRMQmU83i5B15bDgD0DYODC0E86tavi9F/:DjNQ0fB1fykj0Y7j+YU","tlshash":"6ef34216e9f22959180b816c16ec67a5737c4087c61eeeb97d5f33508f4e2c58eb2e8c","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.327219Z","times_seen":73,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.879Z","timestamp":1790792501879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:42:37 GMT\r\nexpires: Tue, 28 Sep 2027 18:42:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171544\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T21:36:18.112739Z","times_seen":39273,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":15,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.060Z","timestamp":1790792502060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:51 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181671\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-30T21:34:31.262067Z","times_seen":565054,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/EU.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.339Z","timestamp":1790792502339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/EU.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"e9173ef4613c3da43c45885ea39c4b96\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:40 GMT\r\nx-amz-id-2: ehFZqzqM9nwrAF5KJpvARQHdVqNCc1q/QhynTbpoVaVqT9hXLn/GIysfMFzeEq5/3zjlMQe9Df/BrR0HEL6HUIWguVZbE5G8\r\nx-amz-request-id: 4556J1R572FW0T55\r\nx-amz-meta-hash: e9173ef4613c3da43c45885ea39c4b96\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1347, 830\r\ncdn-cachedat: 09/30/2026 04:51:46\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 015735ed32eea10e2aabb8b09d21b58b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":870,"size_decoded":1405,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (870), with no line terminators","md5":"e9173ef4613c3da43c45885ea39c4b96","sha1":"218b28ec16584e3f2326b778d3cca1d5c6a682d1","sha256":"b47993af3ef9963a193ddc9d0bd10fc8f1f773fe0881ffa3c8d2151498fccf03","sha512":"00d7715020d6aff8cb33c0816f82fad776e93a11839ebf322e782d322c40e34b5f38cd0ec5fc20f5b9539d398fb7fe2a790779eabe23b473da197bead805c302","ssdeep":"","tlshash":"f8115c6b4308d6384885ca21edb658052653bcfaa8ce2adff1969960b5478c7b400f18","first_seen":"2023-04-19T07:58:06Z","last_seen":"2026-09-30T18:23:08.328592Z","times_seen":7109,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":16,"connect":17,"send":0,"wait":4,"receive":-1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/css/layers.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.811Z","timestamp":1790792498811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/css/layers.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9383\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149596,"size_decoded":9712,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"555579a27cf09267fba10867430e473e","sha1":"849f83cfd76e9e5f3bb8ecf5c5ea6a3bb7be8d86","sha256":"9d1a3f30bb55f8e6a8caf6071fedd36011085daddab3a87d3b4f166d85cc11ea","sha512":"fbf38e8c36629afca6c62e9255b07d86b7bcf01ed0f64c208b7408301f0e885e45ec9252cade062585acfce10679a255e23d0bdd0a328b875b3641784cac06d5","ssdeep":"384:FEk7/bNK4WN+gs/08noEQhsbyTGFvKb22RkWfB4PbYNTNeZfwhrSpD1AbANK+NGk:hehseZWphA4C50O2","tlshash":"7de3ae20ea4285877077ce1833639bc8db6c0267ae038279bbd533545f7d6ac9a917cd","first_seen":"2024-12-18T04:43:11.026608Z","last_seen":"2026-09-30T18:23:08.329106Z","times_seen":81,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bitcoin.com/","fqdn":"www.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"64.239.109.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.157Z","timestamp":1790792504157,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/security.png","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.899Z","timestamp":1790792498899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/security.png HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8823\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8823,"size_decoded":9108,"mime_type":"image/png","magic":"PNG image data, 277 x 117, 8-bit colormap, non-interlaced","md5":"126da0ce9a8dc366b442e3308be1d3e9","sha1":"c145d3dd28974f7fd61489a6d70b7e96ebf721c9","sha256":"1d93ecbf1c3fed817fe3adf360443f5533aa649e25d0b4f3ba3db6cc9e5d4403","sha512":"373b8ea0c5dda2bc434c76a67d37baea6882285e9f5568c07b9f30639332aad19fa39fb26c0c66a0fb581b079f619fa74be0739edf4b724bb492d44363c1c176","ssdeep":"192:Budn6o/w85gHk7ZNRxDqrvi9ehjhmmbC27f00CtjJWV5VbMX:Id1IFHELeAehd3b7TojERbI","tlshash":"3b02c0a53c08b4c23a51e02c9eabd467f541bc91cd43fcb3459b7dad4d745b90502aed","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.329563Z","times_seen":151,"resource_available":false,"data":null}},"time_used":3384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/13148.32cc01dc01751b91682c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.198Z","timestamp":1790792502198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/13148.32cc01dc01751b91682c.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6a06d56c-12cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 15 May 2026 08:12:28 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1348, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2495b2c28a0a462355742c6eb40c3cb2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4812,"size_decoded":2618,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3061)","md5":"9eb8a2729659cd900aee823198b62b43","sha1":"27c53602ca760b97d71eef345b01c1d537900aad","sha256":"3ac4b66b0a6823b837035a5dfdf7fe41b01ccf2a2ac115b143c12356080ebdac","sha512":"6c86fb2c2378e589f4353d32a048ae866196581fc0a8a7ed13c379eb47eab41fcbfc0ee44f3ffe77ff3800136be1da4fbfecfe3456524b96712a1e5cef42945f","ssdeep":"96:FRi/jMMHFeHojARuZi0DWss7UebYiWWD+WRdiaEBymSM0qRIv0nrWvW1HN6Fb0so:rEjMMlIeARmLWss77bJWWD+WRd8ymSM9","tlshash":"66a1e987b9c2f0a063d9aca5953b054ae23d6c1c711bf0e8e2e9d5d19c7b10b9112f36","first_seen":"2026-05-15T11:49:16.287975Z","last_seen":"2026-09-30T18:41:38.122486Z","times_seen":6283,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.532Z","timestamp":1790792502532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:17:09 GMT\r\nexpires: Thu, 23 Sep 2027 20:17:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597873\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T21:30:41.532332Z","times_seen":75295,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.999Z","timestamp":1790792504999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"3b65489e3df378341353ddc879819d4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc449172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4539,"size_decoded":2606,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2159)","md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-09-30T21:54:54.795351Z","times_seen":762,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:45.105Z","timestamp":1790792505105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"95fa576ff32490baa52652a17f62e04c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 468396\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc4ed3f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39935,"size_decoded":9747,"mime_type":"text/css","magic":"ASCII text, with very long lines (39935), with no line terminators","md5":"95fa576ff32490baa52652a17f62e04c","sha1":"16359dfeaee9eac6142541fb857ef49c790f9196","sha256":"103867cb284cc821fa8e3a9fcb38f938eeea660e8efdef3950f5324428cebca7","sha512":"d3e19999896c457ab78b0c8df6b748b3fe7c2ffb0dd09dafa6569fe2f6d8a4d363c2a8747b6cbe143fd1b88fc73954998d86305682d3b85c9e719b7f56969057","ssdeep":"384:gwaRBMbrYbv+esY2jcWlnrCxN82TNSixi7riPftTQUifm7kUdwddCri43V64gpjJ:gwaKUAgMUifm7kUdwddCri43V+SffQ","tlshash":"920374a2b59720ccb197c33290d1fabc642b9670d753c6a6f5137bb98ac25d63612f0c","first_seen":"2026-09-14T08:43:43.753483Z","last_seen":"2026-09-30T21:19:11.363841Z","times_seen":733,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T18:21:38.142Z","timestamp":1790792498142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=09db2bc840920d45179c897b1d5ebd44; path=/; domain=crownspring-capitals.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure"},{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44","quoted":false,"path":"/","domain":"crownspring-capitals.ltd","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=09db2bc840920d45179c897b1d5ebd44; path=/; domain=crownspring-capitals.ltd; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"SweetAlert2:10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":61094,"size_decoded":11894,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (515)","md5":"06b82192ed9940950747ede71db14735","sha1":"2999107e52dbdd55700603f63e6f00c5fa963170","sha256":"a059508936eccbc50a1083f10b4c2b8b93bf08fdb420a29157a209544d31e3d8","sha512":"39e2d2c731c1abc643181eed379a730b442809249c8d5e7cd2a77dc645164e6f81be5f093db744eb13843c109b5964e066552f8da03665f3c706c781a442ec81","ssdeep":"768:Z9gB/p0HAGOOnGYgajK0ZgW/B5U748Mcyq:YuAGOOJgh6B5UM8Nyq","tlshash":"d353b32169f1453701a390c6aa726b1faee09207d50a8a44b7fc4be51fe3f8ecd2754d","first_seen":"2026-09-30T18:20:32.935852Z","last_seen":"2026-09-30T18:23:08.33228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":3,"connect":94,"send":0,"wait":245,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a5df121fbcf9b1d42466b96/1jtvfbr41","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.891Z","timestamp":1790792501891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /6a5df121fbcf9b1d42466b96/1jtvfbr41 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6ab62d2918b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 148\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a4353fb0ea092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":1199,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"f29f08976359231da9d75ba865647bad","sha1":"39ebb780954aa6b6f68e8266929b7f0238e0d5b9","sha256":"aeb3b83c543493ed25673eb02a1b773b527693ddb808dd7ead122d32734a6c54","sha512":"9467a60752423ad7bb478583204ce328e092df8ddb5db11dddb7048a4faa10954fbec469fc876559852069b34116a647fbd94f289d953c16f9021e908824d6ed","ssdeep":"","tlshash":"8b2147f57e1b2537aa3140956e5afa053472415704085cc9460dd8d53690b7a161bcfd","first_seen":"2026-09-30T18:20:33.132039Z","last_seen":"2026-09-30T18:23:08.3331Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":5,"connect":10,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.712Z","timestamp":1790792502712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0932bfcbc6f24c14db6ecf6a40c237b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 147\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fb5fbed2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325187,"size_decoded":121335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42299)","md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-09-30T21:54:54.626988Z","times_seen":340,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.837Z","timestamp":1790792502837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 186\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":186,"data":"{\"p\":\"6a5df121fbcf9b1d42466b96\",\"w\":\"1jtvfbr41\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://crownspring-capitals.ltd/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"chxIcpbwU22LCBK7iufqp\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-kh93\r\naccess-control-allow-origin: https://crownspring-capitals.ltd\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a4353fb7acb62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1064,"size_decoded":1441,"mime_type":"application/json","magic":"JSON text data","md5":"663adb0fa7bf705a5c432aa57db063f3","sha1":"da2dfb94b189f5d1dda53600254eb80022867f1f","sha256":"3673679c751516685f980d4cf3525845800b783164d08fc2399890b0d6b07eb1","sha512":"1504f34ceba19b0053be2c3a2cb7d86cc77b0e11de3a76f7a31fabc73d0350244203e173f15b35236ba3d4e133b83e1f605ec68148f349e886dfc76a5c686622","ssdeep":"","tlshash":"7d1142053e5a2d29925766182f572e9521dc62d3f88c0019e0c1ddbf24a62aa35db8ab","first_seen":"2026-09-30T18:23:08.334056Z","last_seen":"2026-09-30T18:23:08.334056Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1966,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/me.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.838Z","timestamp":1790792498838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /me.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 20 Jan 2026 14:51:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14013\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75540,"size_decoded":14271,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (27351), with CRLF line terminators","md5":"742696370e8b63aee8934a653b0f5afc","sha1":"3cbcdd230885b15bfdbb1e7980a3ccedbeb86780","sha256":"9a58782ea59d0c0632285728bc49d99abfffd2030e36c9843679d1d819cdff3b","sha512":"e896e91dc7be9554fd34075f3a92bd8e52d615efa498d3127ca6cb5222e65ac9000e8bb376b8aa28d48cf3284a29444cd388f4f58539654a74b18e235170273b","ssdeep":"768:Bk4/i8vLMxHm2D6jShRg+LBYgrLM1k4/P8vLM//P8k+s8vLMOZ:g8Wm2OjShRg+dYp8k868f","tlshash":"6573dd37a601c83b45f4d150b4920561f7080fafe2391e1fb9372465ab8d9b5f68f72a","first_seen":"2023-03-10T13:58:35Z","last_seen":"2026-09-30T18:23:08.335131Z","times_seen":558,"resource_available":true,"data":null}},"time_used":1551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1455,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/#","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.848Z","timestamp":1790792502848,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44; TawkConnectionTime=1790792502830; twk_idm_key=chxIcpbwU22LCBK7iufqp\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"},{"name":"TawkConnectionTime","value":"1790792502830"},{"name":"twk_idm_key","value":"chxIcpbwU22LCBK7iufqp"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/images/1000.gif","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.896Z","timestamp":1790792498896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /images/1000.gif HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 17 Aug 2022 12:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1736\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1736,"size_decoded":2021,"mime_type":"image/gif","magic":"GIF image data, version 89a, 44 x 17","md5":"a8f49b4d409d4046b98892fb3fa1fa12","sha1":"969abbf4c905a3bcb56f81cd8366d946802b2b8f","sha256":"93df46f4ed7eba161dcf1fe19f34b156e5ccbdf9e2bedb2c749365e91e2a4ca3","sha512":"51145c171dfa289de1f55b17125fa389cd93bf15914308988461ed102f73ff487e788a6572766e2c91059400827f02437170788e72fb70bf0f74599dcc525414","ssdeep":"","tlshash":"d531d849fdc7f853e44ca6f81dd155535d2e8840c9e0e0ebb0debf8e8a490b5091a9ca","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-09-30T18:23:08.335966Z","times_seen":552,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/service3.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.894Z","timestamp":1790792498894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/service3.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 422731\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":422731,"size_decoded":423019,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Canon, model=Canon EOS DIGITAL REBEL XT, orientation=upper-left], baseline, precision 8, 1400x999, components 3","md5":"574d56da0fc3dd35997810512ec32da4","sha1":"8d3cf8c8d5f101585a26e1104eed39c5451e8200","sha256":"763c554b141af3017447bc5759344048084e3261350e394f32515678ac88ab83","sha512":"49b5bf2652d111978083fddf738628d33930f85ffcbff15663e59b5c9cada9eb82b7ec2411368d5f93f466af6d877c53b4e4c1a0c2b0634f34129593af0144d0","ssdeep":"12288:xfgQZ0O5dJidG71vlEQOnhlNgVqNJC/OK:LZ0YdJi21vlkhFkOK","tlshash":"279412920f445d88e4cb1238c3b46245678b04d48ff11987fefee9557ba2b442dfb29a","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.336458Z","times_seen":131,"resource_available":false,"data":null}},"time_used":2791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2390,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/marquee.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.826Z","timestamp":1790792498826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/marquee.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 403\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1427,"size_decoded":731,"mime_type":"text/css","magic":"ASCII text","md5":"820ce0fdca13d5a565b6773bb215c9ac","sha1":"dba7211685e374055f3c8d3cbc2ed99381062d87","sha256":"af8a51e9653188b1098aebe0c77b6187db7e06202ad5aa852f2309e9ebc69f82","sha512":"9ebe878c836ec7c81ec3f28b6481b787e5bc1fa9561fdd29ce39e41b5fd2b351470f545ffea3672954ebf5738697730b12b32ad5dbcd36ee0a1bb75d97239bb2","ssdeep":"","tlshash":"da217d525f1315e0ffb9918cab92279813208017604dd8fd7d80e208ff8559a39e1f8f","first_seen":"2024-12-18T04:43:11.042768Z","last_seen":"2026-09-30T18:23:08.336924Z","times_seen":75,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.5.0/css/flag-icon.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.828Z","timestamp":1790792498828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/3.5.0/css/flag-icon.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 757546\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 10 Jun 2020 12:02:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQ4VdwKFkyQEEv5WaBcDWQMWtc06xFP0ac9GiQpPbgw3LPso5S%2BuY4Gwgg2%2B4BaLBRvGsupw%2Bt83Ja8XrcuTqv7UhsGHKA8fjUBBhj5IF6HBPszKA5i9K3k4lbXS0aGwHtWqwrJY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4353f9ddbc9b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33961,"size_decoded":2485,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (33960)","md5":"1c7783936db99706c52edb52174b0d86","sha1":"f9dfb9d7cf68cb78a5e1619cfa3e3ef361879db0","sha256":"d27e980d821ec562661f24cab514474d7be86a742b5e915fa6c7efd21e77aaf9","sha512":"0aff778ac41d17068a055f99e17f24695058587493e7c5dbfe354e715f5a46c19202b66c8009c52213290e830370536852d75acb585d8e7d271a9dfe299cb217","ssdeep":"192:o5B9y1dbzi85+DkROJup2j0S+iSM2nTMVZVJggtfQxK/dyleOo:ldK85+DkROJup2j172nTeVJgAfQxOQo","tlshash":"71e2f963da83e41fb60756337a167618a3df2492db814f2a34bf62b1d576244343afb0","first_seen":"2023-04-06T16:22:12Z","last_seen":"2026-09-30T18:23:08.343016Z","times_seen":2064,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/parallax/parallax.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.865Z","timestamp":1790792498865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/parallax/parallax.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2455\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9562,"size_decoded":2712,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (931)","md5":"442b56bc76e5f04da1922dc1bffe68b1","sha1":"af0e3bc6ec615ce67141dcb35522c1f29e83869f","sha256":"d6036d8c76b17ed56be5eaf78875cb5bebd18042da6b8f2de6c15b53a0666c94","sha512":"ca8bc758130d4f66e8f160517a3c489b54a8ff5655ce58263ac68fd1bac2449a21074aa8f1f40dc2a83e527be768732939d503df49de83d2d0756f9574a3fd72","ssdeep":"192:UhMiJoOVHlIZBFnvEURjYsnDJ3JAzFEfYoVe9Erob:UhDJ7FEHnAZSYCef","tlshash":"8d12214b67f11022d38bf2965d6e4904e332502f3a0b981c3f9d10e89f6993816b7fb9","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.343688Z","times_seen":102,"resource_available":true,"data":null}},"time_used":2415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/80580.ec8547202ace51762b59.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.201Z","timestamp":1790792502201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/80580.ec8547202ace51762b59.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab0d909-2815\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 21 Sep 2026 07:13:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1234, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: dad0360212a6cdf728e75e6d3c67c9de\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10261,"size_decoded":4517,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3064)","md5":"a2e20fd3fd8d74744f169f821fbe3a21","sha1":"16afb65ef7e5ef1f3120d2ede0e8015820fd32d0","sha256":"0f57b7e04fecd1a739bd8c59f2712be9758d4e8e438fd1addc377f7644be04bd","sha512":"d6d52684e827312d161e6ca0923c628560dfe7feb6b4de8e7444f9dd95348ade3fa0bd88e15192f13ba60ddc43f0ad79dc6a0bc93b4738c55a59cd882553af53","ssdeep":"192:zWV9NRGehSowGpJABD6rCKTV2Fk8iqA/t4bRPLYRr4/12IOwB27iE9eRYbuxocYR:M9NRGehSowGpJABerCKTV2Fk8iqA/Kb2","tlshash":"5322de8675d2f0e9a7c65cd4807b4446f01a0d3c704eb8e5e7e5c8d2da7a08f9436bba","first_seen":"2026-09-21T17:12:32.459958Z","last_seen":"2026-09-30T21:42:11.010962Z","times_seen":261,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":2,"dns":1,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:45.136Z","timestamp":1790792505136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 66191\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc51d435696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22356,"size_decoded":7327,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-09-30T20:16:08.63272Z","times_seen":40840,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/kmd.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.895Z","timestamp":1790792498895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/kmd.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 134773\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":134773,"size_decoded":135061,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1079, components 3","md5":"f20ea5673c175e3facd0c9d221367b1f","sha1":"9d12a94a972f0011184a0cfb075e0de41b27fd8e","sha256":"57e820e7fc2c86573982a367256a5767cf29592b4163ed4748b9af3957dd8e2d","sha512":"3670436d7bf743ddb3be1776d7776eb145e958e0a7da4cc7e5a49ed0aa2d2648a7d87571b29a29a45fa2dca0557d2f035383e92364be0f42b508d10bbf829ece","ssdeep":"3072:asEEhmG+kEAAtC8kdIx52lq1XwTR4BWaL5g7C0LhwLwiA:EG2RL4c1XwSBWmge0Lh2DA","tlshash":"a9d312136920fce5e3758f31b2b039615d57b0ee81f09a6b6d865134ed22d9831aceb2","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.345328Z","times_seen":81,"resource_available":false,"data":null}},"time_used":3386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3385,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/style.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.821Z","timestamp":1790792498821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10678\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95105,"size_decoded":11008,"mime_type":"text/css","magic":"ASCII text","md5":"dda7cb7181932a7c9ff9d83b059a04eb","sha1":"0ee204d7ac8c2365d4a8c83006773a1682cb1ce3","sha256":"37226b9e049a0581f9d7262a8cf73b1b159528f54f934475752ba481ab96810d","sha512":"62ef0f5b891fe77099daa29815e0aeca28b1b5e2c730dd4087299b3f345b1a966cc20dfadefe11ae0d6d85e5f586ab71e369cd8440cedeedd093420ba43cf678","ssdeep":"768:A4x/HFVW4Nq/949YuFAPzyRIxnjrdNlcFlF:A4xPHW4Nq/9mYEAPzyRIxnjrdN+PF","tlshash":"449340529e731640b517d95c7fdfafa6e22c5063841ec8b87b8062488f453e852aefcd","first_seen":"2024-12-18T04:43:11.034624Z","last_seen":"2026-09-30T18:23:08.345856Z","times_seen":53,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/bootstrap.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.845Z","timestamp":1790792498845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14694\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93064,"size_decoded":14952,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"43ef4106b4831ea0ee5f0d9b555e4f4f","sha1":"f5dd40f7765a63a8adb457de3f4afae2487a2149","sha256":"89648bbdcc9758f07af693fc823422a15ebdad7bad49e1643290ea085e212215","sha512":"adc01bb48e50eace3f2ce5a4b0fe10012a9ff8dc456c0321c57abb8219c99bce8fd1540a7f37d3877893dfc87b91bcd050887d4b6284269bd35790e6d0f8c2b1","ssdeep":"1536:DVvzuj0h676kEQINEsNJGVSed3SNJOMqWc/8xs62cnHuuj+J7ViUp12Wf/N:D1pgoXQpCOj","tlshash":"d893630f77f53472925bb039897f8506b236644b6a4aac187d4c51e81f2c87c52b6fbc","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-09-30T18:23:08.349255Z","times_seen":307,"resource_available":true,"data":null}},"time_used":1636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.878Z","timestamp":1790792498878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=COQC; Domain=.google.com; Expires=Mon, 29-Mar-2027 18:21:39 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"COQC","quoted":false,"path":"/","domain":".google.com","expires":"2027-03-29T18:21:39Z","raw_expires":"Mon, 29-Mar-2027 18:21:39 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=COQC; Domain=.google.com; Expires=Mon, 29-Mar-2027 18:21:39 GMT; Path=/; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1714,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"8be9ae937812c44593cbc5803a4d1f38","sha1":"0c00ddeb1b4aaa75896ea513060d9fca7cdeb984","sha256":"89ee5b5a770d133a1e1720fabf437d4d4e1664aeaccf0a60d830554e2d7c9f97","sha512":"0e934a784a5f8f4853d100ba1b89417cf33e2f3ad31cddd9f27c387d36effefadedcd402e3940624ac8954b427c216ab5cdc77f44a727ad8bd3f5d48958cf1f7","ssdeep":"","tlshash":"df5106998876d0d6c4436c29cfaf927932444037ac11dce5bedcd912ffb051ab64d5d4","first_seen":"2026-09-30T18:02:23.865521Z","last_seen":"2026-09-30T18:23:08.349796Z","times_seen":6,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":109,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.296Z","timestamp":1790792499296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:51 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181668\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-30T21:34:31.262067Z","times_seen":565054,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":42,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/96931.458e5365d85ba22fe8be.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.208Z","timestamp":1790792502208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/96931.458e5365d85ba22fe8be.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abb6fd9-4adc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 29 Sep 2026 07:59:21 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1232, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: af307f2415e735254ec3292d4caaac34\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19164,"size_decoded":8432,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3069)","md5":"28895ff40bab03b02fde1d390e8c05ca","sha1":"651ec0334a6c7daa391b6c91a20474985436134c","sha256":"f86d545536f0da31fe9e62222d9d30c8074f7ce81e0136c97edab99e14eae2bb","sha512":"c53667dae193f505fa44113eceb813cc0b5ba397edcbce4ab2d01bc8ee927ecbe132ce55ef77a2a005c3884e9159dad028d8740eb71ce0a64f82758ede8062ba","ssdeep":"384:QfI3YDRMRs6gFFCZwGHuuxK1zIXbvhJqYHcFCgue1K9mMeazmIpXjHKRN07ZI+AG:QfIkRMYmZwGHuuxK1UXbvhJqiXg6mMe4","tlshash":"7c82f894319b702b03e515efd8255641f738186cb40e88a4fadcacd9389b88e93f3d6d","first_seen":"2026-09-29T16:17:52.702484Z","last_seen":"2026-09-30T22:08:59.816345Z","times_seen":36,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":29,"dns":0,"connect":8,"send":0,"wait":3,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/logo.png","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.889Z","timestamp":1790792498889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Jul 2026 12:54:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1244242\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1244242,"size_decoded":1244530,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"6328d842bebdabe0bd88a1abc9eee5fd","sha1":"1493898a48e1fd3b9a194b2958309362a2d23169","sha256":"8e7a6a6bb6b77680468daedec45d0caec25dfa92acd030ecd31f08f2bd961784","sha512":"5ae4a61fbd0b22ffd620e544f23736229a3a6cc654a70ada1e163623abda62bbd1462b3072ad28cdf4023732032ec150e5dbc2978ff3250b10470dc88eaf6bca","ssdeep":"24576:s09qqcVTi42P061LbaLxRWfY3sim98GFCMgSqi:T9qfVv2soCcv98vMgDi","tlshash":"722533fb5b1540f9cc10a6318cfd844ddd7a821811a20f8daaf24b51eda97e9235f9f2","first_seen":"2026-09-30T18:20:32.903721Z","last_seen":"2026-09-30T18:23:08.350911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2394,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-forex-heat-map.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.836Z","timestamp":1790792498836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-forex-heat-map.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: zstd\r\netag: \"9b59a8bf3d1a82fddcea47db296a00b8\"\r\nlast-modified: Wed, 30 Sep 2026 18:16:51 GMT\r\nx-amz-id-2: 08P8z00QUwHpeFk7o+7la7EKfh4MrgRWNA315rACU5QIH8Rt/fcdy447tboCzBLVDTCCzbUMz9A=\r\nx-amz-request-id: C8XVEJ76PZ5CB2XC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: umI87jQpfL8qJMzRJcuOnHO_JrROjXlF\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1029, 830\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 09/30/2026 18:19:09\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9d10d66e281f26a7d53178f6f66f223d\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12574,"size_decoded":5812,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3435)","md5":"9b59a8bf3d1a82fddcea47db296a00b8","sha1":"caabbb307146b7495c9a4339251b28630ab61328","sha256":"b1298693c4b9a9c80370fbac381a26a7c7319ab9e5c4422e65dce87f57b7a61c","sha512":"479fbd44463a09d0301d79f07f3e7dba38780ccb72d68e0bf6376dfd1bcb69103cbbcc5f78cf3e153a543c7770ebb836cf977a1e28c87ea98d718f7bc2f9dd4a","ssdeep":"384:gf6uCWoofYkudjZwpRA0q6/UxmMs6lmEMET2s/:uDswpRAD6/UxmMsUOET2K","tlshash":"a542c7aab660dcbd519945dbe07a2320b61d3944f206eca4b5ece4c550bdccca530b7e","first_seen":"2026-09-29T06:05:19.234777Z","last_seen":"2026-09-30T18:23:08.35186Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":32,"connect":25,"send":0,"wait":3,"receive":-1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/apear.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.866Z","timestamp":1790792498866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/apear.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 740\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2595,"size_decoded":996,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8a56c286a3f49f44e2fdad088a39d359","sha1":"dc1135d4ceb6b58f8ee0cb6f9619e5ede803ffad","sha256":"059406eb4df59cd0cf6b980c1f2fdb0d2fde5f98aab54bab4f6eee4e34ec2b02","sha512":"c29678741213649cb1c4411e5d59c1eae8c0d6e41f07c8c867f3549510bc6ebc97006a43b27682ae99f14aef5baae7086b1d6c2f1da22a50ec9477fbfcbd8c7a","ssdeep":"","tlshash":"d8519b0eb5da3d955973b33e9b6ba104e67100375242c2517cec9c783fb2c50a5a6fd8","first_seen":"2023-03-14T17:40:47Z","last_seen":"2026-09-30T18:23:08.35242Z","times_seen":98,"resource_available":true,"data":null}},"time_used":2414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/nice-select/jquery.nice-select.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.870Z","timestamp":1790792498870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/nice-select/jquery.nice-select.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1021\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3969,"size_decoded":1278,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e71515190fdc2ef9c33ae5ab7a714bf","sha1":"f5f552ef4122e4595e4e5db160f925f8aac9165f","sha256":"6f59a94be1126e463cdcc3784151a1529684afea738ea8f0ee3da7353cea858d","sha512":"0c50720b3ab3ae2eedfc9867b4c53aa737172457a1f45f649605afd6cf111cfde239e3c0c18097fd2d18082a48bd2f7b40457a1110f85eb5c22d71744a5304a4","ssdeep":"","tlshash":"b181001ab2d121b294ff30a32a137045b237582be569c5067d5d42f01f9ec70abf6f9a","first_seen":"2023-03-09T03:34:05Z","last_seen":"2026-09-30T18:23:08.353015Z","times_seen":152,"resource_available":true,"data":null}},"time_used":2410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/recent.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.873Z","timestamp":1790792498873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/recent.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36911\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":269468,"size_decoded":37169,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2411e5e498a25aaed8d9d49408738530","sha1":"3c4ab4c53474c458541ebbb3f83db5a3ad1a6dc6","sha256":"0142624c1d2f65fc49a1728209dda6bc370c5a4537ea54cdcbf623b10ed1ec4e","sha512":"3cad8b0e784ac2ec54e230be42df2df49fe8506d105b0a83b46b67d0165e8b5c850e7fdd359ebcac2799ed21acf7a17075bc6b68e051fcd40b9a96b867f610e3","ssdeep":"3072:QSLksOwzzm9qOoXi8JvI6nMjuLMdx8OjQ:QSLk7Kzm9qOoS81I6nMjuLMduO8","tlshash":"e14448acccb202d1067a66301b7a154da09882f79df5be66ffecd15a0f1ec1e682171d","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.353393Z","times_seen":101,"resource_available":true,"data":null}},"time_used":2408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/particle.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.876Z","timestamp":1790792498876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/particle.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9977\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61361,"size_decoded":10234,"mime_type":"text/javascript","magic":"ASCII text","md5":"62ef1c27fb67e791d1734712fd5b4138","sha1":"929aa84d1e5bf66915fc1157f6a337b9717c0d23","sha256":"46c96ff2eb1ce3ea4e2ff60518c7e543ebc37918c03d8a8e591ce7d8a008137b","sha512":"eabd22c0c8225c4b973bfcf9676673bf22ada435039fc80bfc24ff4e997fb8a61f7528a12bde4a91495c80b6657847a78af88717367c99e35b6091cbeabda2d6","ssdeep":"384:kZR/TaqbiUWEwLge3gjGCWr8pOwtZciYc7asscRG/Af3f7AGvVWnbp1PFH+L1rW3:u/HZ9aWRGof0AVWnPZ+L1rWsdA","tlshash":"0b53ec8d5bf72c232247b1b84fdf9002e73080d71a4a9da4bd5c02599f98965d2befe4","first_seen":"2024-12-18T04:43:11.080043Z","last_seen":"2026-09-30T18:23:08.354208Z","times_seen":70,"resource_available":true,"data":null}},"time_used":2407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2406,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76754.dde3cb0655e046a6a1a5.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.212Z","timestamp":1790792502212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/76754.dde3cb0655e046a6a1a5.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abb6fd9-2789\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 29 Sep 2026 07:59:21 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1234, 830\r\ncdn-cachedat: 09/30/2026 04:57:11\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 93ae21f6f77a9360eda3bfbc35063384\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10121,"size_decoded":5191,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3066)","md5":"7fca88d3ecbe8b3b198d1145e91d482c","sha1":"d4d5b406ca0df160089cee81826670f39b004ee0","sha256":"f27557700b447eb54c002a8e5cf4905b3d3d524be3378b86662e8ac71b5f2486","sha512":"e3da18ae32fd2df105aa83b6c8398487f87dca5cd20ace13fed3a0194d4f8ba6cb0fe87c86e9d75418e8f6e6e29e52e5ce1f7ec60652912631f5462828050336","ssdeep":"192:rGvxIJoFOomDjvTKZnZHrbJ3TF25sYBl4AHW8M5q4lLJQRCRbI/s:qvSJEOrDi1BrtsBlW8Wq4llKCRbis","tlshash":"fc229554f0c21bec39a193e0f9b610d1f25bad46f5025464ffe44de329a5d8730aaea8","first_seen":"2026-09-30T06:05:17.884694Z","last_seen":"2026-09-30T18:23:08.355176Z","times_seen":6,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":3,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/84351.ee41920526450899c2d5.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.414Z","timestamp":1790792502414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/84351.ee41920526450899c2d5.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6aa8e1da-2da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 15 Sep 2026 06:12:42 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 859cae7e8798d97ab46cf92713acf7fc\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":1043,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (730), with no line terminators","md5":"fc82c1942a94a18ed8eeb91ce639d900","sha1":"99c487498b541f0b91e2a90373c6dec55833c0d6","sha256":"8fc4a89d8cf63aab3d91d03b39f0c6b80029917bb9b9d2380c7db59cbc0a49cb","sha512":"035f091c5ddb5a0d2cb1d55fb04b02e2ebcc0da5c87a2d09793f9aa9ec1bb1dbd018647f00adb2124fba270910a8b48516f66fec9b0c0063e3243f7a7638cfcf","ssdeep":"","tlshash":"3301d4dcebd86428d82351374794f0ca3136af572a5d7559dac8fc5219c2fa177a320c","first_seen":"2026-08-17T15:35:03.997173Z","last_seen":"2026-09-30T21:42:11.014638Z","times_seen":921,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/animate-css/animate.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.818Z","timestamp":1790792498818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/animate-css/animate.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4668\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75701,"size_decoded":4997,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"936e958e1d56612b3fb48ff4a81b8bcc","sha1":"3f577e8266fc7a13f1c8bdd85f93c17306ac6904","sha256":"98fcade2c6f989f2ed2f165c4ece32c5d97f91488cd9668c3dc12ccc290dd98b","sha512":"275b4445651333a0850005b22051bfeaefcc173815e1081fe5f4d99ca76b91fdbb238e5ec3be675a4139a974530a8498c31755d810c012383e7adf48d29aabe6","ssdeep":"192:fIQHn8gf0pQsLqgf00QKENJiFUHxU2UUVx/bpr3VicrFVbf8VSalFo0S8WSilAoD:fIWFvtvnixi9vXvF","tlshash":"4673296929a2104466374a1587df9f78263ce1631826fcfa73de588bcf41fac23c9617","first_seen":"2024-12-18T04:43:11.031294Z","last_seen":"2026-09-30T18:23:08.358986Z","times_seen":102,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fx-rate.net/converter.php?layout=horizontal\u0026amount=1\u0026tcolor=000000\u0026currency=BTC\u0026default_pair=BTC/GBP","fqdn":"fx-rate.net","domain":"fx-rate.net","tld":"net"},"ip":{"addr":"104.26.4.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.840Z","timestamp":1790792498840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fx-rate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 09:27:17 GMT","end":"Fri, 18 Dec 2026 10:27:15 GMT"},"fingerprint":{"sha1":"DB:0D:69:98:E9:3D:21:45:B2:27:27:CC:00:BA:C2:D6:B0:E1:8F:7C","sha256":"55:82:0C:FF:B1:24:E3:CF:70:E5:A1:7F:1A:B3:7D:6A:BC:F1:98:5B:79:36:F6:08:02:17:97:6D:DF:FF:C8:07"}}},"request":{"raw":"GET /converter.php?layout=horizontal\u0026amount=1\u0026tcolor=000000\u0026currency=BTC\u0026default_pair=BTC/GBP HTTP/1.1\r\nHost: fx-rate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:21:38 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600, cache\r\nexpires: Thu, 01 Oct 2026 08:50:00 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9%2BOAEFC9GlYZ%2FjOogMHEwL4a6H8xgdRFaDYbhGasoOs7FdiYa451mMIFprKrZxpJkxsn0drYrwJzflsx9oUnVUoY1k2cBqGqw8XVRUDYi7RieZ9G1VJIPwYub3u\"}]}\r\nage: 2373\r\nlast-modified: Wed, 30 Sep 2026 18:19:09 GMT\r\ncf-ray: a4353f9dfb478be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21745,"size_decoded":7412,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (13043), with CRLF, LF line terminators","md5":"716d83f45d39f6ff11a5aff3c1f0ab79","sha1":"73738404b401e59cf5988cdc9d33cef84caffe3e","sha256":"843f9c3d8019cd5cf23e4b54bff820d39118590742a3f4659c6a5d2f2d791893","sha512":"c6e50cd1a8caa49da6d825767540702f53f3ef6714e91f873a1537f22782d1ec160c74d4122a029542814f2c6189ff431f2e84b0f35183fc32d19542f59d28b5","ssdeep":"384:5qnDDsP02INYYR7FPfwsn1Y0V1VUUr7iLV3n7:5qDDs82Wf7FPfwsn1Y0V1GOAn7","tlshash":"f6a2ed563991ce6490cf1ddf5132327468bc2741ab864289fdae97f3932e8edc233619","first_seen":"2026-09-30T18:20:32.932419Z","last_seen":"2026-09-30T18:23:08.359551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":11,"connect":21,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/#","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.879Z","timestamp":1790792498879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2:10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":61094,"size_decoded":11646,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (515)","md5":"06b82192ed9940950747ede71db14735","sha1":"2999107e52dbdd55700603f63e6f00c5fa963170","sha256":"a059508936eccbc50a1083f10b4c2b8b93bf08fdb420a29157a209544d31e3d8","sha512":"39e2d2c731c1abc643181eed379a730b442809249c8d5e7cd2a77dc645164e6f81be5f093db744eb13843c109b5964e066552f8da03665f3c706c781a442ec81","ssdeep":"768:Z9gB/p0HAGOOnGYgajK0ZgW/B5U748Mcyq:YuAGOOJgh6B5UM8Nyq","tlshash":"d353b32169f1453701a390c6aa726b1faee09207d50a8a44b7fc4be51fe3f8ecd2754d","first_seen":"2026-09-30T18:20:32.935852Z","last_seen":"2026-09-30T18:23:08.33228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/89188.55cbc7a1da963b3829b3.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.181Z","timestamp":1790792502181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/89188.55cbc7a1da963b3829b3.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6aa8e1da-14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 15 Sep 2026 06:12:42 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 77b42df5b93a3b915703f19241c6f79d\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":810,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8c361f5f3e81eca6f243f991934acfb8","sha1":"cca2cc0145571af645e93a0eea492681a68d4db1","sha256":"b7db039e8731af6abd4fe1cad1c082f9a54cac9bfae4de52cac6cbb64431ff06","sha512":"94498523c2221fd084df6e33d95e80c4f0dcc1054ff64a84c7c5309491e66301e34045b6df7d5247854e2893bf8e3fd6ca8b22f2e40daebcad83853dec330ad8","ssdeep":"","tlshash":"757000020028200280800800222000000003023a2a880000a80080200802aa08a0a00a","first_seen":"2026-01-06T10:31:31.715579Z","last_seen":"2026-09-30T18:23:08.36077Z","times_seen":9181,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.559Z","timestamp":1790792502559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 08:23:32 GMT\r\nexpires: Sat, 25 Sep 2027 08:23:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 467890\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-30T21:30:41.499776Z","times_seen":93493,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.975Z","timestamp":1790792504975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"09a8a4df0fbc87c70a3579eb083e45cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc419062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3526,"size_decoded":2167,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3525)","md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-09-30T21:54:54.662769Z","times_seen":271,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.849Z","timestamp":1790792498849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18763\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94178,"size_decoded":19021,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1718), with CRLF line terminators","md5":"56664bad5237fffcfbcaee400518564f","sha1":"3f47a13cde00d423a0cc3061a872760292c21aef","sha256":"de2515399028901391b02ed842ad1772ab240687c48f270b1ffe645fdc0e68a4","sha512":"a7ee45b9531f769f430463ece3839cdc81278f86dceef12e74180198f5d161bcdf4bea83344b6b9cabb6cd1dd56208ca6c765f280b09913206bb0372a9c6f36b","ssdeep":"1536:Tx+0LFrUzWBPo11B7IST6FewNqDYsUmUa+bu354EnOZDXAZGJC0xbqrly5kZG8yp:Tx+0LFrUzWBw1l0ewNqDnHq30sO64ekA","tlshash":"f993a71676a0107a94b77336e53fc914f1b25a3b670588a1babe60bc4f34d4053b9fe8","first_seen":"2024-12-18T04:43:11.087874Z","last_seen":"2026-09-30T18:23:08.362361Z","times_seen":68,"resource_available":true,"data":null}},"time_used":1732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/jquery-3.2.1.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.842Z","timestamp":1790792498842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34940\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145741,"size_decoded":35198,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (522)","md5":"986d2baef41aa37ae02ab33355413b98","sha1":"ddb65f1fb486e0142e2ad61d11621e93bd34e4c9","sha256":"cb3c74487498e9f91ec9a5f5840f128445caf82d5d1fce5d4f691a71c3e1a631","sha512":"023c0579c370a1a207531876ab8ddd6ebbdf4e31ba3b51c2b1b43b8d1eec3a7f7b9c75fde7b795ff667cf6b081a435a99ca30d020190b5021d5b8e4b03f5ccbb","ssdeep":"1536:zrPxGtTs8qbaD98+kBgFMQPlhuHp77z+hLLHmbQhkBjN+dVtWRnnykV7L769LRcx:vPxbWhLHiEkSdbAnjsPcvDGPFreJ4PdO","tlshash":"6ee34289b7e624369613f07d8ebfc805b17a445b2a9ced557c0c91a42f1443886fafec","first_seen":"2023-03-07T12:09:45Z","last_seen":"2026-09-30T18:23:08.363421Z","times_seen":522,"resource_available":true,"data":null}},"time_used":1639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1545,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.300Z","timestamp":1790792499300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1176766\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Sat, 06 Jan 2024 21:53:23 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67W6ZDDN3SW8mrREYUhh6HojKMPD3qYLpuujs%2Fs5W4J9yvU4jUgL7VOx9BxNyF6Mi1H%2BfMOjes7vOJQVSrysK5opnVM8klJT5pRk2NCXfQKjF07bgHf55LJcwHF3iOcC4KCodrq%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4353fa0ae631525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78196,"size_decoded":79195,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-30T21:40:07.956348Z","times_seen":172754,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.907Z","timestamp":1790792501907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /embed-widget/forex-heat-map/?locale=en HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=120\r\nexpires: Wed, 30 Sep 2026 18:22:24 GMT\r\ncontent-security-policy: base-uri 'none'; script-src https://static.tradingview.com/static/ blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://platform.x.com https://songbird.cardinalcommerce.com/edge/v1/ https://checkout.razorpay.com/ https://cdn.razorpay.com/static/cx/ https://*.checkout.com/ https://*.revolut.com/ https://*.cardinaltrusted.com https://pay.google.com/gp/p/js/ https://applepay.cdn-apple.com/jsapi/ https://tradingview-gateway.com/ https://www.tradingview-widget.com/static/bundles/embed/ https://widgets.tradingview-widget.com 'nonce-kUZ4Itpt/OT5Ac9AXwq55g=='; object-src 'none'; default-src 'self' https: data: blob: wss: 'unsafe-inline'\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nreferrer-policy: origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1236, 830\r\ncdn-cachedat: 09/30/2026 18:21:42\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 58e6011f823fb1d392c08f8f1d323a12\r\ncdn-cache: EXPIRED\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":48788,"size_decoded":16684,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19214)","md5":"37e8652524b007d036a891216c7094f4","sha1":"2ba1cbe03f2bdb8372a11d5c2bd80f618f970672","sha256":"b858554b8a7b244f2ccd54756136b4c3972180b45f94b7f3a1c9ddcfeafe934c","sha512":"d89fe6033081ee9404b5533faf37277317dcf929e80b30c9535e808a5231de1c073026e5b94e699a16e85c4fd353a83b0d3d1f50baa48e7ae8961e0b4e7d7c5d","ssdeep":"768:iTltS32lWJKJ2qnsoDEzGrPw83MaiCr90mH+qLuzYOiuSZZwH5OEBaVM:iTltS32lWJKJ2qnsoDtY8/9BQYOiuD5x","tlshash":"b223e95384098b05d9d68a057c33b103fd2d07a8955268987aacd8ec159ffc2f1a7bfe","first_seen":"2026-09-30T18:23:08.365133Z","last_seen":"2026-09-30T18:23:08.365133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":2,"dns":40,"connect":40,"send":0,"wait":134,"receive":-1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.861Z","timestamp":1790792502861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:42:37 GMT\r\nexpires: Tue, 28 Sep 2027 18:42:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171545\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-30T21:36:18.112739Z","times_seen":39273,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.970Z","timestamp":1790792504970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"0bd462f8b42caa969e21b8e4b2662c5b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc419032efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10688,"size_decoded":4558,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10687)","md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-09-30T21:54:54.591187Z","times_seen":208,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.973Z","timestamp":1790792504973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ec0736224b16cd4c3c1504f06b8b79fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc419052efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11206,"size_decoded":5032,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6129)","md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-09-30T21:54:54.585514Z","times_seen":268,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/jss.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.890Z","timestamp":1790792498890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/jss.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37646\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37646,"size_decoded":37933,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x450, components 3","md5":"8896e4d817385d9175ff99de918dadff","sha1":"6933226ac7b0c9a1cfb72f1208e1158aa8f3b94d","sha256":"b0401e5bd377013b4b698dd6d4df956407805a424220693d7560828a72e95c56","sha512":"dbc5c5f47af7c6c76c572f8e0e87de8d0e96f16ccbcb93e65a70546c879f056987ecf9216537264cf595d628ceb07548d1734285d5685c621abea06c696460fd","ssdeep":"768:7mzS/MrpO6Y9RDdvQOFosfZuun73/y4sHMfN08isV83S4WRrqmM1dLNL:7qEQpOVRDdvQOS1WyHMyHWRrQ1hNL","tlshash":"3df2f102289557d1a0a98e74972d12c8b2af2990c2af7d7f7e3dcb4ddc1a3c470a04e6","first_seen":"2024-12-18T04:43:11.092116Z","last_seen":"2026-09-30T18:23:08.372184Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/11401.47821c730cac88dbdf05.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.209Z","timestamp":1790792502209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/11401.47821c730cac88dbdf05.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab21bad-21e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 22 Sep 2026 06:09:49 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1069, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2e7ccf563065a5bcdab33ceef5fc45f7\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8677,"size_decoded":3938,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3063)","md5":"210929184b81781778883b4f22b7ea9e","sha1":"e455f7bfdc57b0acbaa35dc2f79f485d443b65b5","sha256":"e67c50a2c27fae9df11d8630a7871f95e62e12ce2cf681f5361e61b254222fd5","sha512":"a727f73aa88dcd6f04e994e43a4946a4d0daef663442a6a741b2650ab1d7eb8713a9585adb7995b21934514eb3d18c7d16b7b5dd67425e3d4a218fd0395491a8","ssdeep":"192:HY1vY1f5DrV0yAOuPQu6FX7Rc1DMk28hMiM+87VKfYPqu860bz3f/sE+KD3zDX:i6RvVRAzPQu6FX7R4DFjhJwVKfYPquly","tlshash":"da02979779927571638b259cc0bb450b25a96c643ade18aef93914cf2d1fcc03087fb8","first_seen":"2026-09-22T13:35:19.60618Z","last_seen":"2026-09-30T21:42:10.876025Z","times_seen":235,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":1,"connect":9,"send":0,"wait":4,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.530Z","timestamp":1790792502530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181751\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-30T21:30:41.549026Z","times_seen":98798,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.856Z","timestamp":1790792498856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13890\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74929,"size_decoded":14148,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3269), with CRLF line terminators","md5":"c29bccfdcf4932da5d72db3ae5980e74","sha1":"e1808375f5e3877344df661ca3d49e4eb64dbcaf","sha256":"a9677a302d962058a69374b281d6fb7865eea33169b688674f93d2f539c01c53","sha512":"4bde355148956bfd9afb126f8e91fdc8487c3253ba7d97493a9e47899e7d8088d826b6199cbfe9a9f2f9c2d718ef36b8bf27fd225e316c3a1a7e2d6bda436f15","ssdeep":"1536:o2SySvGuDorFU6DLfOCD3G4/D6Xmds0xGMZ9Fo454xeDNY0JB:TS/7crBJOKs0Gqa4Rn","tlshash":"6673b657f6c00c7d86b7a215ca3e9818f2767b2ba70188a3b97d54684f3491012f6f7e","first_seen":"2024-03-03T15:52:17Z","last_seen":"2026-09-30T18:23:08.37556Z","times_seen":96,"resource_available":true,"data":null}},"time_used":1725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/banks.png","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.898Z","timestamp":1790792498898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/banks.png HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110123\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110123,"size_decoded":110410,"mime_type":"image/png","magic":"PNG image data, 1110 x 477, 8-bit/color RGBA, non-interlaced","md5":"0702f0fc9aff150ebd3c9c4873470051","sha1":"f8f18d823c34d0809f53d665a528ba2113b89b6d","sha256":"d05226b5d0acaabb8341b32e9f326e8c0a55bf2f10e7a20eefad438f871e7bcb","sha512":"372bd767d8e0c71143ee80ca97791c0f784054011ac0cf19a2a720d7e2ec758dab33106ae3774c7d121cfd2eca024fb7c997c7d0092cb48286031b6b6b8b4ed1","ssdeep":"1536:b/sSHTI8fznYONu+rqUIlgUHSZ/kvQspH8LOaKqjLqEntMxpFej6t2TC2LlmW5uX:bkSHs8RrqU5Q8LOGL6bej6t29JZ0hLd","tlshash":"d1b302f9efdb4da0c6d3e233219ac72477b45cc91216c3d863e9351b6d5003e6618ada","first_seen":"2023-07-04T15:20:27Z","last_seen":"2026-09-30T18:23:08.37687Z","times_seen":99,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-sheriff.tradingview-widget.com/sheriff/api/v1/rules/search?origin=https%3A%2F%2Fcrownspring-capitals.ltd","fqdn":"widget-sheriff.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.330Z","timestamp":1790792502330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Dec 2025 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0A:93:73:BB:95:EC:D1:52:11:5B:CC:2D:92:43:D4:FD:5A:2E:BE:A4","sha256":"70:E8:96:A5:F6:09:13:92:CB:0D:3F:A5:37:C4:A1:0D:4A:F7:52:C0:C1:B6:21:DB:D5:92:33:3F:B5:7D:EE:0F"}}},"request":{"raw":"GET /sheriff/api/v1/rules/search?origin=https%3A%2F%2Fcrownspring-capitals.ltd HTTP/1.1\r\nHost: widget-sheriff.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 30 Sep 2026 18:15:24 GMT\r\naccess-control-allow-headers: Content-Type,Origin,X-UseNewAuth,X-Build-Time\r\ncache-control: public, max-age=600, s-maxage=600\r\nserver: tv\r\nvia: 443, 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: https://www.tradingview-widget.com\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: same-site\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: capWMgRou5b5b5rpsvnSr_Qket3BcNobSCAhV6_SOFNh7ymeylouvQ==\r\nage: 378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":687,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":24,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/CH.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.347Z","timestamp":1790792502347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/CH.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"d490c6879d1a4b832c5fd71de4b4bd38\"\r\nlast-modified: Wed, 20 Dec 2023 06:30:39 GMT\r\nx-amz-id-2: 37b0r5wzQ4qSOziNRebA0o+coHaMaENsIzRA0dGrQGs3WzRwP89vjvNHhAqcKe1aSRQdmuEemqw=\r\nx-amz-request-id: 0BHJRS1XWA40G9W3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: d490c6879d1a4b832c5fd71de4b4bd38\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1232, 830\r\ncdn-cachedat: 09/30/2026 04:51:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 54dc2633b17aa9f6dba06eaf905a56fb\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":323,"size_decoded":1132,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (323), with no line terminators","md5":"d490c6879d1a4b832c5fd71de4b4bd38","sha1":"2faf3c6bb3f17594b06fc3a8c7b0a9b4b52d59c0","sha256":"3e5657d1033fd76d680853cb65e85338623961ca92b1e768cb902aa995a81a99","sha512":"a03bc306dddec855aae306318edf5429cbcb8142faf7420677a459a7b1df5002ec22996602071373c3b721e1c25b3f0baf83f45b6530fa89f4ccb9b09cdedce8","ssdeep":"","tlshash":"cae0d87951385008a411c3b5a8bc945b208e60cbf29c12d9b5403106181a1f79f14a98","first_seen":"2023-12-23T23:42:09Z","last_seen":"2026-09-30T18:23:08.377888Z","times_seen":2925,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":1,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.866Z","timestamp":1790792502866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:24:42 GMT\r\nexpires: Thu, 23 Sep 2027 20:24:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597420\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-30T20:39:50.914977Z","times_seen":37958,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.995Z","timestamp":1790792504995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ed6ca00f1050102e4e4ce885305432fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 141\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc439102efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215095,"size_decoded":74897,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-09-30T21:47:54.226074Z","times_seen":269,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/US.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.341Z","timestamp":1790792502341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/US.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"2b343664b411ee3b87b4a37c15f4dfb9\"\r\nlast-modified: Fri, 25 Apr 2025 20:10:41 GMT\r\nx-amz-id-2: cIzXNf2heIavG7/5xHmZQxEDNJMIOwp4ZB/9Fn5q99XmgMVdfBDiNQ87pzy0oYrQDvHoPtHIdniZMiwpptMuwFWdW8nrN4o1\r\nx-amz-request-id: 0BHTQ4WMVEVDP340\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 2b343664b411ee3b87b4a37c15f4dfb9\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1069, 830\r\ncdn-cachedat: 09/30/2026 04:51:46\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b5999a4356c326cb09af2b72ed2f0b2e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2910,"size_decoded":1354,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (2910), with no line terminators","md5":"2b343664b411ee3b87b4a37c15f4dfb9","sha1":"0bbfacaf518424005de9debac0618b2d385f73eb","sha256":"71bfd6b1db0f03e8ad00d7951a2ec80d684450490bae344b9a0e33141e9264b0","sha512":"9f919e0006556b02b85110cffca18cf69613d63530fd055b4e2a2c27166c8e27401d7aca3482e568802eab205eefc5f98b6ae545c1dc476fb41a9b614ab0825c","ssdeep":"","tlshash":"97518f2a941d951c2846e60dc77f8882738e2d0771a5a2d81dfcf3a4e20f7e5fb47880","first_seen":"2025-04-26T10:53:44.17511Z","last_seen":"2026-09-30T18:23:08.379566Z","times_seen":6694,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":14,"connect":17,"send":0,"wait":2,"receive":-1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_forex_heat_map_widget.6020ab396c12bcb226e2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.194Z","timestamp":1790792502194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/runtime-embed_forex_heat_map_widget.6020ab396c12bcb226e2.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abcdbc4-1d93\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 30 Sep 2026 09:52:04 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1236, 830\r\ncdn-cachedat: 09/30/2026 11:49:22\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 892af0e41c7981aaaed555f292ea92ae\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7571,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3048)","md5":"2fffa95ecddd85d9c2ed5c7cb4e67b32","sha1":"acebd4ec4a9f0ff4894f32227c8f34fe4f69b73f","sha256":"832b62e26fc036269dd333713d457ca1d7051e0bec15aecd9c2628c7f8c79247","sha512":"528c9a11562d1c2998ed1bd57d0e73786ee08c0212ad5da06832eab18a02a79064adbe66a54a0f2da0f4cc8defc9b8a600e3781d087437f9576fc661a695fd58","ssdeep":"192:78j4vFXdPKD+rkZSJ0AnRlx77NOk+soF0M:gjwF5KDWkkeAnRlx77gk+soFV","tlshash":"40f1a69c3154e46125bb1892417de491f22c62bf5f07e4b0931afcbcb868ee47a73e61","first_seen":"2026-09-30T18:20:32.909823Z","last_seen":"2026-09-30T18:23:08.380187Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a5df121fbcf9b1d42466b96\u0026widgetId=1jtvfbr41\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.828Z","timestamp":1790792502828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a5df121fbcf9b1d42466b96\u0026widgetId=1jtvfbr41\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-prq6\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-2-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 147\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a4353fb6bc252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3211,"size_decoded":1974,"mime_type":"application/json","magic":"JSON text data","md5":"3a2486d2554bc0656940a011924be507","sha1":"1db338a9b1e21a595338a1c968c2ecc56a747255","sha256":"1f4f37751fcb628df4e4228af5fe1916e997a295a4de5eeb18f9225e12654145","sha512":"5255d25715213d3c97b98cd75793fbc4737132937ad0acc6863f85dd437b082ab86ff6d43d0f32f93089a3b1ee7e5ff7799be5c1eb82d9675f88c3a6bfb82e81","ssdeep":"","tlshash":"9961143a4915dd3963c9925375df3627a93dd123e384151de098ad3883efacd321274b","first_seen":"2026-09-30T18:20:32.971812Z","last_seen":"2026-09-30T18:23:08.382769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":4,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.865Z","timestamp":1790792502865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260928 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-mLICzrgw0R2C0c3KImPh3A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw1ZBiEOLh2L7s61U2gQnTLq9iUlJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzsDSy0DMwiS8wAAAhHhLH\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=CoMCCAIStQEBAQxeRWaLkUECci4zk2EcUAE5y8-jpVDqKk5EJI6Ihce00avpUo2wL2_q1XIavL6ntCg_T3CHMZ2TXNEGOaqQ3UqvXhWEC0A1Y4m8Ezg5Tgamf5XwqgcZmQBgdqpB4WRaEAkP8XzuEfFxcvW330eFcE5D0jPDdmWcVO1H6CYLLJZItQFLTu3Hxcs7mT8A48noCqwKyHhzrJMXjK-OtPdWFoER-GVjtywRg5M_je6z3rgwfi8EKAIyRQF9bMSqdjHevUEiPd4zzNMhJXFWcd8yspCUT7Ebs8yBGT9zXzXXqkPzzy0wWcSxdaVE_VUFiTFxrIkitwk5jmUqiengDQ; expires=Sun, 31-Oct-2027 10:40:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CoMCCAIStQEBAQxeRWaLkUECci4zk2EcUAE5y8-jpVDqKk5EJI6Ihce00avpUo2wL2_q1XIavL6ntCg_T3CHMZ2TXNEGOaqQ3UqvXhWEC0A1Y4m8Ezg5Tgamf5XwqgcZmQBgdqpB4WRaEAkP8XzuEfFxcvW330eFcE5D0jPDdmWcVO1H6CYLLJZItQFLTu3Hxcs7mT8A48noCqwKyHhzrJMXjK-OtPdWFoER-GVjtywRg5M_je6z3rgwfi8EKAIyRQF9bMSqdjHevUEiPd4zzNMhJXFWcd8yspCUT7Ebs8yBGT9zXzXXqkPzzy0wWcSxdaVE_VUFiTFxrIkitwk5jmUqiengDQ","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-31T10:40:01Z","raw_expires":"Sun, 31-Oct-2027 10:40:01 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CoMCCAIStQEBAQxeRWaLkUECci4zk2EcUAE5y8-jpVDqKk5EJI6Ihce00avpUo2wL2_q1XIavL6ntCg_T3CHMZ2TXNEGOaqQ3UqvXhWEC0A1Y4m8Ezg5Tgamf5XwqgcZmQBgdqpB4WRaEAkP8XzuEfFxcvW330eFcE5D0jPDdmWcVO1H6CYLLJZItQFLTu3Hxcs7mT8A48noCqwKyHhzrJMXjK-OtPdWFoER-GVjtywRg5M_je6z3rgwfi8EKAIyRQF9bMSqdjHevUEiPd4zzNMhJXFWcd8yspCUT7Ebs8yBGT9zXzXXqkPzzy0wWcSxdaVE_VUFiTFxrIkitwk5jmUqiengDQ; expires=Sun, 31-Oct-2027 10:40:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/service1.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.891Z","timestamp":1790792498891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/service1.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 525561\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":525561,"size_decoded":525849,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, height=3280, bps=230, compression=none, PhotometricInterpretation=RGB, description=Stacked cryptocurrency coins (Bitcoin, Ethereum, Litecoins) (Stacked cryptocurrency coins, manufacturer=NIKON CORPORATION, model=NIKON Df, orientation=upper-left, width=4928], baseline, precision 8, 1050x750, components 3","md5":"fab4d507232af0da83ac8e22102742d3","sha1":"9484899edb399601ea3a6bb44fc112b12d4b6114","sha256":"403a549fcdfd6643a4275d12db4084d6391ac9febbff05969f1f1d835ade622c","sha512":"f7537d8eca90d3de0f1ff7c5dd5207681c31281cd16bc069f1d8da24cf8d9aa273418f70095d9cee4422f95075d1b746d4d783453cbc7f1f064e518341e34b22","ssdeep":"12288:FdAjhEEP+Osx4MVOPjvQmRcNcEc+Cgc/8k2nt1O8br++:Fq/Sx4JqNE+79ni835","tlshash":"f1b423798a50db1ac8b2edbd71fc2eea800017d19c2144b4635b7427bfb62cbb41c5b6","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.384018Z","times_seen":87,"resource_available":false,"data":null}},"time_used":2793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2392,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/right-laptop-img.png","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.897Z","timestamp":1790792498897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/right-laptop-img.png HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27606\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27606,"size_decoded":27892,"mime_type":"image/png","magic":"PNG image data, 570 x 335, 8-bit colormap, non-interlaced","md5":"b2c56cad00f9cadb4a89775b1f5a48c4","sha1":"ce7501b60b5409596129a09c20835c560fae4ea2","sha256":"3cf13e76ff5c8dd3ef7185c2f9e8ed4fb69f96559de95b3fa193a0446934b9dd","sha512":"c9802f3627159601de134223490e5862d2d14c50c6690088d6d04bf4da03dc35396d6b1487cd36f04feafb4540239638abd24ee387eb3879da368ed8f813c2f9","ssdeep":"768:gksOkbOBzoe08C5tWGSxkNtqiAXeuHHW5:gkkO908C/YV3XY","tlshash":"b8c2e1715098fa78fb7b468b4df120386065e55edaae7bc64d62d3f1839076602af440","first_seen":"2024-12-18T04:43:11.094245Z","last_seen":"2026-09-30T18:23:08.384758Z","times_seen":39,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.851Z","timestamp":1790792498851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.actions.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2928\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14823,"size_decoded":3185,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (501), with CRLF line terminators","md5":"a89c1d1f42e11ac15cf49c72eea030f9","sha1":"e9f6cf449b6b7675fc735cc40fbcd7db6068ccf6","sha256":"a731ed5c6318669d9394d1a2c0e96893eb2ab78d3d0f7d5e123ce72bd84adc6c","sha512":"0406e0cefec6526cc7991ae93e0440268a747ea9bacd0738abe89cb1ea1d17e55d4b55b000a0fcab65142b5ef7e0939c1d47d479766e6df74d1f44c21cedfb8d","ssdeep":"384:lRSaWT9+smNAsVs3euL4HbEAEuqCJ1kin:lRSaWT9+smNAsVs3euL4HbEiJ1Xn","tlshash":"1b625216fa101daec477723dee3b80d2f571265b6208569ab89fe0a84f3816055d3ef8","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.385408Z","times_seen":96,"resource_available":true,"data":null}},"time_used":1727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.857Z","timestamp":1790792498857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7686\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40098,"size_decoded":7943,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1739), with CRLF line terminators","md5":"976bc6e251bf8c2824186c394559d3cf","sha1":"d079f48e00cc211c9d5517c2eb7dc50f7de7d9cd","sha256":"39bba996f8dc980d248534c95c0031136e9ab6077fd67a9e89a1ab2b229047f2","sha512":"d61b5082dc62c8501d7829076140b263cdae99716daefc9fc676c2cde6b26d5e4a9c1bc4b374ecd6bff482340b06695ee0f7668a7df561d9c21829f5792601c7","ssdeep":"768:zcnDsgoEwJ5u+l8vZ+dzTFDw8t3gj1N1wa/TtBWsJlTW/:zcnDsjnJtl8vQ1TBw8Fgj1N1jzy/","tlshash":"2803739a66d0143e5033b32bca7a84a4f2739b3753065e0538fe61a41f794a107b6fad","first_seen":"2024-03-03T15:52:17Z","last_seen":"2026-09-30T18:23:08.386Z","times_seen":96,"resource_available":true,"data":null}},"time_used":1725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.waypoints.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.859Z","timestamp":1790792498859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/jquery.waypoints.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2971\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12878,"size_decoded":3228,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (644)","md5":"8f20942241958400468848972e6e322b","sha1":"196b56b86596763b5213e181b96f91f1549e9cc7","sha256":"3c57aa21470e7dc530838c84c81a7357f067fef9d16e962b1b266d4d375692ea","sha512":"6458d845477c4847e2ced666fb4219bd077efc9955a150c1cf4ff3bd40785e73a862725cf304c0246ec49b8b95949829f33ed2f3e8a824323876f005de871975","ssdeep":"384:mEAsHfr7cgiFHw8P9FaYMEgy6yDTtiduidQc7qO9BuKq59/hlzto:m4fr7q9DqXWqxq59/hlJo","tlshash":"894202096ff52422a75bb079dd0f96097335841f654a9c25388c92d80fb703c5bbafad","first_seen":"2023-04-28T17:58:00Z","last_seen":"2026-09-30T18:23:08.305966Z","times_seen":130,"resource_available":true,"data":null}},"time_used":1719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.301Z","timestamp":1790792499301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181759\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-30T21:35:53.563329Z","times_seen":347972,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":27,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.513Z","timestamp":1790792499513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 07:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"698ecfa4-6beb9\"\r\nexpires: Wed, 30 Sep 2026 19:19:48 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7310\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XAf4uO49D%2B71fA8SrWtwzlOw9wl5trQpLQf9Ixz7msVXNKJX7KwW%2FkwA5i%2FXrhRqjFFkYMcKcOoQRPvypd6Teymb9KEnTGJmvnodOU0vQXRHADd4ZY8TVjdQDcGjWJeEOdlPas%3D\"}]}\r\ncf-ray: a4353fa1fb5323eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442041,"size_decoded":129341,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"bc3e8108dcd36c0d0c129a726dd8f47f","sha1":"db6320723c55ad91550a1ca87176058bed49d99c","sha256":"791450932271b1682c103cadb334baea8bf68100069c3c3eb317ed8a20098483","sha512":"821203cb21570cee7a989e40a417990e408949e7d239766562cfee62c0a0320c936bfbc8fcb2ecb35067ba1034eb7363d907edb72ccd878ee510640aa7a976b3","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnE2:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnE2","tlshash":"53946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2026-02-13T07:56:32.581356Z","last_seen":"2026-09-30T21:04:29.204048Z","times_seen":3185,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_forex_heat_map_widget.c7c2437b9aeb8e81de89.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.214Z","timestamp":1790792502214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/embed_forex_heat_map_widget.c7c2437b9aeb8e81de89.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abcdbc4-4b33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 30 Sep 2026 09:52:04 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1068, 830\r\ncdn-cachedat: 09/30/2026 11:49:22\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f63b60ee7a7964a03d483fe14143e0ee\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":8234,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3071)","md5":"1a75348ac5938935f76b2b345c365cad","sha1":"2034b7908882cf59ae2920cb61dc49054aea0232","sha256":"3818cd0e9a5154d0817b3b628e5404f9165acb77a26104ca2a2bb01212af9f12","sha512":"2bf6dfa1a359922cb77ab775f6d9eafaf857d7299539965c1c29f21a21638d8393491bfcfa30a3488064566c062f7c84d6bdebce4635dae311a1f11cab1a9bad","ssdeep":"384:nOxYO/ArvDCnigno4b6q4rL4KjDLR/LBy4cXvThnc4tYXIZU5NJJcYgNx8orsiqi:OxYO4rvGigno4b6q4rkKjDLR/LBy4c/7","tlshash":"9282081861d170f387ab2499e03b5486e2711564f00a4591b3ddccee676dc89a337f7e","first_seen":"2026-09-30T18:20:33.04116Z","last_seen":"2026-09-30T18:23:08.387628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":61,"dns":2,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/responsive.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.822Z","timestamp":1790792498822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1882\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10871,"size_decoded":2211,"mime_type":"text/css","magic":"ASCII text","md5":"d97ce50f1d694fc60bbf62e6c0b30eed","sha1":"f0516bdaf78b7275e6d70485c316b70a409fda96","sha256":"1bfc8dbf8774b2d603b6d1f3953f0293f16adf4113ec9332f91b8828313c8b47","sha512":"c276d2c7fb46d7f24cd7cc72c2d1d2fb4c4490366595503f67aa451ccaf5bdf9f95b30171b8119eb806d48c52b02095d74e1bd9c27f9c8a6d6f603dc02be6d40","ssdeep":"192:F/SY9n919J9A96V00zwdpdOL6pKPkp56R3Rc5KMD5ft4fQ4pI43PazVntkRcP20/:tb9sajJ+nEBGWAXp/87vB2","tlshash":"95227a8f6ea325459d8bb0686ffe4b6632b18017d50ddca27d9ca188cf492d14dd2f8c","first_seen":"2024-12-18T04:43:11.037294Z","last_seen":"2026-09-30T18:23:08.388336Z","times_seen":74,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/popper.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.843Z","timestamp":1790792498843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/popper.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7894\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33720,"size_decoded":8151,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526)","md5":"5259c4560cbd2e4acbab385473035b16","sha1":"e4a6ddec75f53ea8546d9e80ac85ec6dba9e4ed8","sha256":"ca673877524dd1585558169dafd5b4cc7c680c93596aa37662598f0c9b749116","sha512":"9aaca9198e983744ece35ac7dfbbd22193b1c6fd1d382efb138782c6ea32b34b18f185004ba4934335d3389a81e3227f7167a12f3b01274f115478072145e239","ssdeep":"768:1QauBa/OnaRgDgGQzRZP7U8L7rUFJ4G/HZ6FRKgHLBJxRvM6RtA9qR5V2RSxeb:gQKruPU8L7rUFW9lA9QM","tlshash":"e4e2549d7ae131358617f03a896fc8097332141b5a8abc003d4ca2956f7497c97baff9","first_seen":"2023-03-11T14:25:01Z","last_seen":"2026-09-30T18:23:08.388935Z","times_seen":124,"resource_available":true,"data":null}},"time_used":1639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.853Z","timestamp":1790792498853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.video.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7013\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":39546,"size_decoded":7270,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (849), with CRLF line terminators","md5":"288e9e6c91acc4dee54bd438adf54dfb","sha1":"ddd8b222328b312ee7bc94d24b7e9b129d305456","sha256":"a29b329932f52e3f82f736ef4e9e980514ecf7177e86d92a29177db42e6d68f8","sha512":"863dff79f3506cc2fa8d9fee2aff7204cafdd04fe87410638faf31975e2dd21bb260e7e1957e2555262a9da6e3612ef94aafcd3bde7f4f94ae6827bb1d607787","ssdeep":"768:r6gxMIjAR0Zb5lZ1qLO+B4hKoecSuYRP/L2u0kKCbFXzB35AZdgIfNyCg6Lgp:r6Snb5lZ1qLOkMKjcSbnp0kFFXz0dgWg","tlshash":"08035327f5440878943b7666dd7f9454f2b2ab3fa204899138bfa1b00f38d5056f8ee9","first_seen":"2024-12-18T04:43:11.052997Z","last_seen":"2026-09-30T18:23:08.389609Z","times_seen":64,"resource_available":true,"data":null}},"time_used":1726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/jquery.counterup.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.743Z","timestamp":1790792501743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/jquery.counterup.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 935\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3992,"size_decoded":1191,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e788a1f7bf3b5b872ca8e74b78d07d67","sha1":"a37295eef28f9bd45cf6ae11c505b6c0e889659c","sha256":"6e21813f29d1fc5f161e7141d07caec46261268a60a69d2b0f4b8c7a2a1783dd","sha512":"cd11bf814622c92fe346563cabc106068ac26b54d6e8387bb9ffb80989915e7d8138eeb1c01f9e7026a87ef7beed35b15d6bdcc6a0c860ddf54bed51fe7eabbe","ssdeep":"","tlshash":"6881672a6c7b18882e63f17d675f32546332b51b0414dc0eb99c51801f86a3d93e6fbc","first_seen":"2023-03-26T11:16:32Z","last_seen":"2026-09-30T18:23:08.295367Z","times_seen":108,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/33390.9fdb0bdfa91fc26b1ad2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.204Z","timestamp":1790792502204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/33390.9fdb0bdfa91fc26b1ad2.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6ab63728-4fc9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 25 Sep 2026 08:56:08 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1067, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 08e14cac188890ade7adfd5cdd01deeb\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20425,"size_decoded":6845,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12983)","md5":"8d05ca1efd98fd80d089ebaae4c5a28b","sha1":"aa87b946fbd035006319b33be73e604ecab18da4","sha256":"d1432a9c56236e06f81227eba93a1c20ea18bbcdcb3f049c8207f86e46fcf38a","sha512":"cc29598ad7d1f660820208c8d4b22d253e6506bba84481982fdbd5e8bf6e64bea732f0eff76d7711f1f2c8504d782dd47219193ba6af38ff6c7bd797a559ff67","ssdeep":"384:5etN1TgC8Ht9Is99Vzi6qj/XSrmlr+tFpSZ8jdDpClMiQA3DlM:QtN1TgDcsIj/XWm9SA8jdDpClk5","tlshash":"7e927379593edaa66ffe55da183b0c820fbd41433044504976accdec2b447a5f23aaac","first_seen":"2026-09-25T14:01:43.94869Z","last_seen":"2026-09-30T21:42:11.062308Z","times_seen":114,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":28,"dns":1,"connect":8,"send":0,"wait":4,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.bitcoin.com/widget.js","fqdn":"widgets.bitcoin.com","domain":"bitcoin.com","tld":"com"},"ip":{"addr":"13.115.82.64","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.699Z","timestamp":1790792502699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.bitcoin.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Jul 2026 00:00:00 GMT","end":"Thu, 14 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:94:B9:35:4B:0F:79:11:7F:52:A3:54:E9:BD:27:23:17:BE:A3:06","sha256":"22:74:57:ED:58:1D:AE:EC:E1:52:CD:95:7B:AB:9B:32:D7:F9:71:97:AF:98:A9:58:43:95:A4:A1:C4:0E:59:5E"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: widgets.bitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: awselb/2.0\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://www.bitcoin.com:443/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":1452,"timings":{"blocked":-1,"dns":58,"connect":279,"send":0,"wait":279,"receive":0,"ssl":836},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/counterup/countto.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.869Z","timestamp":1790792498869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/counterup/countto.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 929\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3847,"size_decoded":1185,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bc472c43a5157a4e1e61679fc3e95ac","sha1":"4478d1290b163b18e209fe1715753e6e21995700","sha256":"c30bd86f2f691cf97e8f6facb3eb18c549b53248cdda78b225de4d15da66bcde","sha512":"b2e0a0119e027f6a4695eea4d858c9614d2ebc8b6458543c84466371860b8543884a8bcd082acf50c73f4c737f5beabc467d78d4115778dd30bc403c72a04d6f","ssdeep":"","tlshash":"d4815989b75f2211957733e99e5b124ce779933b144302487aac92c04f72824eadafbc","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.390797Z","times_seen":97,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/footer-bg.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:40.405Z","timestamp":1790792500405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/footer-bg.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/css/style.css\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 633581\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":633581,"size_decoded":633869,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1052, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2048], progressive, precision 8, 2048x906, components 3","md5":"dd2af4e78a0c6674d0745b53042f541c","sha1":"8e0a328ec3d22f7b10c326f352cd3cd9e36fff9a","sha256":"24b3ec88e6f6e220dabf93d39ea1fb2a75e0ec2d64a8e4724a2f659c5b4a47ba","sha512":"bd022dad674ed6cd00cc4e59640473803365517b44ce5717f5e895337c70a23646a97e02de2eb471495a6940e89f6e9199037fb38305e67cde686ac079c7f00e","ssdeep":"12288:dmfIa0Y/OsLYqaeU6FxoqzFtUcRc0qnDwJRBjhcN7LiVsELTdj:cIa0g1YqaP6FxoqptZbqDwJjjhcN7F6l","tlshash":"ded4231b76d6de04e5439270b924c05e2bb5bfe1162392f73e0f0046fb91ba98cb6467","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.391392Z","times_seen":118,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:40.415Z","timestamp":1790792500415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:51 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181669\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-30T21:34:31.262067Z","times_seen":565054,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/63501.c37a0b5a93b49f1c6a41.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.183Z","timestamp":1790792502183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/63501.c37a0b5a93b49f1c6a41.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6aa9a0cc-6d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 15 Sep 2026 19:47:24 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1347, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 02e71e165f28a28f9d8bfba4fb4e2766\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1744,"size_decoded":1413,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1744), with no line terminators","md5":"08cbd25988ea0f7d5a9eb194a0f164af","sha1":"aefe6c43e152268bdae134bff550da2113f39679","sha256":"cabffa050b687a11c404f0bb1db24f6e2df033e468a58377847feec213cfe441","sha512":"80a29ee6ae816faaf5711eca5be0a17b9ea4bb257cd52ee0e4a1eafda30ddcf6422a420c957af5e58f4fc64435a6de165de4c1aa25e7a08c374e7caec934f88f","ssdeep":"","tlshash":"2e31ce7593aad3387a771b376241558a3199f64773730239e580bda881d16bb3b333c4","first_seen":"2026-08-03T12:40:54.623994Z","last_seen":"2026-09-30T21:42:10.963385Z","times_seen":1726,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":6,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/30235.a8dafec297d4bd7121bf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.199Z","timestamp":1790792502199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/30235.a8dafec297d4bd7121bf.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6a9a6083-1d8b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 04 Sep 2026 06:09:07 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1236, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 41779f22c26c8fbf8c22825b30b8e4b8\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7563,"size_decoded":4324,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"bacd9a7e8ac893e05c873109e1b3a8d4","sha1":"8753029eacc8617c83f60945d44d0682455e878e","sha256":"bb59ed69987807a980ff5044e1d5eb55d4edfcb8e5460e191b11fb24524d49aa","sha512":"50c35ba12a81554476fc4d7180143b617916aef222a2e2065ffbd6a3ff8493e1865e69981bca837202da7221faa7528a1b3a99fea470c3b81c2c03108d025750","ssdeep":"96:w7ZIput7XybCUh7PE8Ne8tqhvcElErhbv2MP31Ss0XKuWlAQqX05kHs/ka+qp:waY78ls8Ne8tqhvfObOqb0XV8BSukske","tlshash":"daf1d7c872f0f0dba3e328e480ab4806f1369d69558e6066e34566d32d35ec681fff95","first_seen":"2026-09-04T11:21:10.926471Z","last_seen":"2026-09-30T21:42:10.952014Z","times_seen":708,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":4,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/12338.ab3c669fae535be94dcd.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.211Z","timestamp":1790792502211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/12338.ab3c669fae535be94dcd.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6abcdbc4-54d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 30 Sep 2026 09:52:04 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1235, 830\r\ncdn-cachedat: 09/30/2026 11:28:44\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 262f17818e8ede7a64020ba34f584b86\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21717,"size_decoded":9461,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3060)","md5":"77d2aa30500c7b8a2235746f79fc7b5f","sha1":"cd4ea1012df9c7cbfd209096c998fe0d480dd5e8","sha256":"177424bd5ee1bf1827ada966e9e6676030b56f033c455a126ab54488cfa79a93","sha512":"4fd3e2a07b41c44a3992af598d325442a0cbe6c38303e69f14ef50a8e3f79cf7f54b4bd976e1f079bef3b596cae8c0ffed6121010afe6d41b07b7e87ec666c53","ssdeep":"384:X3A5p5R7Xi24wXqtKrVtY5AWyXCjuhJ/YxtHSc4+ebPcUwSd8GSALgSOMlf3CmjP:XiA24wXqtKrVtY5RyXCjuhJQxtHSc4+m","tlshash":"22a23a5af9e9feb6d7e640d490375446f22c054238888468bb7d9dce294fec80252dbb","first_seen":"2026-09-30T13:46:39.647471Z","last_seen":"2026-09-30T22:08:59.816941Z","times_seen":8,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":28,"dns":1,"connect":8,"send":0,"wait":4,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.868Z","timestamp":1790792502868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 21:40:11 GMT\r\nexpires: Sat, 25 Sep 2027 21:40:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420091\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-30T20:39:50.89215Z","times_seen":37519,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:45.103Z","timestamp":1790792505103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"720e14524f21b150f8b0a7f9f9d9f978\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 468396\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc4ed3e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21020,"size_decoded":5395,"mime_type":"text/css","magic":"ASCII text, with very long lines (21020), with no line terminators","md5":"720e14524f21b150f8b0a7f9f9d9f978","sha1":"6e05d7727d0e572d79e5b9b660e84634a95226dd","sha256":"1e270e730a76ba5e8e438bc8c6f263d1b7d69895cbe1565983f68ce9cbe8fa4b","sha512":"e838082c1cb6a17a08e6cf09f30b50f128ec7c4fb6ab53f506d2ab295dcb6b01a59c69770e22f561ba393158390ab4fe1b63e548849ab4c954cdcaa6cc784cba","ssdeep":"384:gwaDBMbrYbv+esY2jcWlnrCxN82TNSixi7rg64gpjnKSp:gwa0UAg+J","tlshash":"1b92ca93b5a314dce297c632d0d1f67ca83f4a20c757c9a7b5037bb88a91ad73641a4c","first_seen":"2026-09-14T08:43:43.682132Z","last_seen":"2026-09-30T21:19:11.38764Z","times_seen":552,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.258Z","timestamp":1790792499258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 01:01:07 GMT","end":"Thu, 12 Nov 2026 02:01:04 GMT"},"fingerprint":{"sha1":"FD:90:F9:85:2C:11:21:20:4D:E4:CF:6B:38:9E:19:3E:3F:60:24:EE","sha256":"08:B7:0B:29:6A:86:C0:65:3F:09:26:35:90:8F:EB:35:2D:0E:D7:6F:CD:F9:6D:6E:EA:D3:8B:8C:EF:0C:0A:F6"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dp8Y2BzH7Kc7p5pIZm2rNCOAxKN16hqwrDdDRsXesSXtDk5YYpckLKb%2F8dDtbBRCWvly3ENRCVty5t5tU6h27ErVgcn1vmrF9%2BpSrRjGrR%2BTPzWE2SWMuzOHLlruHKhfyHZhxr4%3D\"}]}\r\ncf-ray: a4353fa07d0c23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":234,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/img/bg-9.jpg","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.264Z","timestamp":1790792499264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /img/bg-9.jpg HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185863\r\ndate: Wed, 30 Sep 2026 18:21:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":185863,"size_decoded":186151,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x890, components 3","md5":"84c06a25e5d91f72a020087c6eede685","sha1":"cc70b9273bff6d2ea556248b2d64a521c5c844e8","sha256":"4aefaa590c2dd602e798dd0b9e29cdcb23e470eb852741f26cbe165cafc64927","sha512":"68331f2d61a681e7117bda27e65eb8dd0fdc2d1d14d42b2ed851300af9399a7d00e7f37bd186ba0570dbffe4afdc4bfb16a39cc2678e85fb03a24f0bf9d37044","ssdeep":"3072:zfux6J0y1UybJ0yt5c/1ijP5c/1im/Rsv7P/XKvvRXzuDuZXZZVQGeiFe3bit:KxepUMB1PMJsvuPZZV0kDt","tlshash":"3c041205e7d6d1bad7607437f0a23a20eac0bc8161849bda1db8290a0debd97b754cf1","first_seen":"2023-07-14T21:38:24Z","last_seen":"2026-09-30T18:23:08.398052Z","times_seen":188,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3019,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.294Z","timestamp":1790792499294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181759\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-30T21:35:53.563329Z","times_seen":347972,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":18,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/GB.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.346Z","timestamp":1790792502346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/GB.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"09bfac5408302ee8c52fa2ed008c4f13\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:59 GMT\r\nx-amz-id-2: xmcUwZ1Ia+fw3K+qP40C+r0aNpGODeM1JxvyO/UHpvrGtx3n7Ed2rXqyn22n3JUZH7re+/AiYtdgUfsG/5DCSihYWv6BiDGA\r\nx-amz-request-id: 0BHKNFBM4M1F0G9G\r\nx-amz-meta-hash: 09bfac5408302ee8c52fa2ed008c4f13\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1069, 830\r\ncdn-cachedat: 09/30/2026 04:51:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 127a339fd20cc996d41dcd2e1e4fbc8d\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1256,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (468), with no line terminators","md5":"09bfac5408302ee8c52fa2ed008c4f13","sha1":"ec2b53eba8ec1a31fc6745cd9c4fc09518db1c2f","sha256":"b3e463d925abc879f5b76428144c0da44bc02fae2188f71bc9e7aa7ab6f46037","sha512":"91a4dac83bf63f0aca8abe1038f8228640fcdda0cb3dee9d5c886cec74267b834c8f4cf6d59c7e8185c035190f46cbd931bd3661590b81d16240ff2d4f9dcd6c","ssdeep":"","tlshash":"7ff05cd9932d88008842c228fb190030205e70faa1dc05eeb8aae6203a416f7a887ecc","first_seen":"2023-05-01T20:32:00Z","last_seen":"2026-09-30T18:23:08.399048Z","times_seen":3525,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":15,"connect":13,"send":0,"wait":2,"receive":-1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/CA.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.350Z","timestamp":1790792502350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/CA.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"bc781af019f19646a76bdc030890ac78\"\r\nlast-modified: Fri, 22 Dec 2023 12:52:26 GMT\r\nx-amz-id-2: DLVFkJJkiQSQ9MIOwm6V3eqXhjhTQpAzzL4b/5NxuabrAPMslIHNuKhvIUGKz5XKmf4kdcRgpm4=\r\nx-amz-request-id: 0BHMGN1X5M3R0KM6\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: bc781af019f19646a76bdc030890ac78\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 894, 830\r\ncdn-cachedat: 09/30/2026 04:52:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ec0b3e180348fb83efcd36d08dc6d403\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":373,"size_decoded":1185,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (373), with no line terminators","md5":"bc781af019f19646a76bdc030890ac78","sha1":"fbe1a3708c0378b110f31d4aee3f88b60379e265","sha256":"4fb8085bfd098cb58f6c39c7c724b34d4354b8efb5135ecf762a6be5ab6677a2","sha512":"a996f0ee3952c8058f7cd4c666d9cb02bc5380bbbf7173028f7557682a829f05344373bd985f7e9ff255432394eb2da60958c6f4085f2b17c9cea2de1829f45b","ssdeep":"","tlshash":"d9e0f136a138e418de41a31595b4084e701eb8d7f18c138bb10021102a032f72b88a90","first_seen":"2023-12-22T15:34:58Z","last_seen":"2026-09-30T18:23:08.399631Z","times_seen":2958,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/favicon.png","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.417Z","timestamp":1790792502417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-30T21:32:54.986616Z","times_seen":157084,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.834Z","timestamp":1790792502834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crownspring-capitals.ltd/\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fb40f488d34d8e500cd5193b6cbf1df5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 147\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fb6bc262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10475,"size_decoded":4378,"mime_type":"application/json","magic":"JSON text data","md5":"fb40f488d34d8e500cd5193b6cbf1df5","sha1":"37afd6b5aafd32a9f0b98843b182aba8cf5ce608","sha256":"e2076eca9c47fe568e55ee6b0f1d9d11ce186576fabecdb8c27fc645b33e8fae","sha512":"22fe865ed894dea88eb72850a15dbfc321356ba6c67e2cdf325170dc19d03c1f0c427e3af6a9e6bd63bc27a024d706dd1ee6c00c02727a27df9140a77b7af2e5","ssdeep":"192:vmdjWl179zTRVUEAHq9iH+TidAg8G+9pPkKVKOetm6ksTAdYPizj1L:ak179zOHq9iH+TK58G+9pGtHLPizp","tlshash":"f422a557cb105adb02c257863e8fb5c2b63841de179425fbec4834bc03cddaa6217b86","first_seen":"2026-09-24T04:33:32.521723Z","last_seen":"2026-09-30T21:54:54.627881Z","times_seen":391,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb5.tawk.to/s/?k=6abd53387750b2249bbb514a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTVkZjEyMWZiY2Y5YjFkNDI0NjZiOTYiLCJ2aWQiOiI2YTVkZjEyMWZiY2Y5YjFkNDI0NjZiOTYtckQ0b3VoTXhtOTVORDZWbFFSQ0hKIiwic2lkIjoiNmFiZDUzMzg3NzUwYjIyNDliYmI1MTRhIiwiaWF0IjoxNzkwNzkyNTA0LCJleHAiOjE3OTA3OTQzMDQsImp0aSI6IkpzUmF0V1VGMnZiYkJIM3pobHBNeCJ9._nlOlbWtFDsdwDI8HmzZxNOgG8p6OWfYHCfkr9S2kjQ_5J37FW_nx5OF2JRgdUfzwre1Ak0OsbVrPFqD4f9ihw\u0026EIO=3\u0026transport=websocket\u0026__t=Q3pZHQ5","fqdn":"vsb5.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:44.972Z","timestamp":1790792504972,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /s/?k=6abd53387750b2249bbb514a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTVkZjEyMWZiY2Y5YjFkNDI0NjZiOTYiLCJ2aWQiOiI2YTVkZjEyMWZiY2Y5YjFkNDI0NjZiOTYtckQ0b3VoTXhtOTVORDZWbFFSQ0hKIiwic2lkIjoiNmFiZDUzMzg3NzUwYjIyNDliYmI1MTRhIiwiaWF0IjoxNzkwNzkyNTA0LCJleHAiOjE3OTA3OTQzMDQsImp0aSI6IkpzUmF0V1VGMnZiYkJIM3pobHBNeCJ9._nlOlbWtFDsdwDI8HmzZxNOgG8p6OWfYHCfkr9S2kjQ_5J37FW_nx5OF2JRgdUfzwre1Ak0OsbVrPFqD4f9ihw\u0026EIO=3\u0026transport=websocket\u0026__t=Q3pZHQ5 HTTP/1.1\r\nHost: vsb5.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Az/M0/Y+XuSu+T+gh3vtEQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 30 Sep 2026 18:21:45 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: JU5PfdU5edRB9YeQ/RT/PZ8XFmM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a4353fc449de56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":16,"connect":15,"send":0,"wait":551,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/css/font-awesome.min.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.805Z","timestamp":1790792498805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6891\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38738,"size_decoded":7220,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (403)","md5":"70e245b9e6460be0267a89f4ffbc7fa9","sha1":"dd6c1d48599211b51130c9fd07408f8eeb18b7ab","sha256":"d05f7f3fa7bef48f7affdc676c28cbc5679775f02f5203217b06400eb71bc5ba","sha512":"9263e6932a329c2e4b0766a7cd309ef2577dc1d7517c304c95b0e1a75d4884e7b67fc885972985b26263af0c99860ad40f04dc75514bc7bd86cfe86f87ac7d36","ssdeep":"768:7/aAoLzBbi6U1wkxZTIH05BQIgf03DIPgm:7/3oLzBby1JxZEHCmIgf1Pf","tlshash":"c50315acd5bf18914319e4c5678ba240b325bbaf8d484c5cf286be8cdbc167581c2bdd","first_seen":"2024-12-18T04:43:11.201177Z","last_seen":"2026-09-30T18:23:08.401506Z","times_seen":48,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:40.619Z","timestamp":1790792500619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7616\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59463,"size_decoded":7873,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1092), with CRLF line terminators","md5":"e311dfb2bacd0a25231cd9e08ec9a639","sha1":"3acc061aa41b9f416ce7722739aaff4b3a148ceb","sha256":"1e190bdcc22d4f881ec80b05253a67900f02d86ef4994e0b63135659475ac90e","sha512":"fee0671e5bbfc3a8d70347da1222f5d7585479a79c0a1c8910932b2fd87543dd5e93d3fa5e679676d97af7d70b0fe573ddcfa2dbe12d547e04b9b9e18be6f873","ssdeep":"768:isGZuIqJOZXpKWHqVocPy//5QWSvXS6BzP2RKuJV1:izRq2//hvV1","tlshash":"8c433317ab11043a90b3e33a9ab94e1af275873754069cd7377d66700fba02812e5ff9","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.281399Z","times_seen":96,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2VT5C0V7PC\u0026cx=c\u0026gtm=4e69t0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.955Z","timestamp":1790792502955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-2VT5C0V7PC\u0026cx=c\u0026gtm=4e69t0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\nexpires: Wed, 30 Sep 2026 18:21:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 191122\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":587083,"size_decoded":191706,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9263)","md5":"8b18e2ac9936d8588b98c1c4629615ca","sha1":"afd57a0e25dd48e13b01da67a934bbb2f45900ad","sha256":"94cfda6c78b87a70ca343320c56bdd35ef4dfc65bfbcefd36634d85c9c0c1a11","sha512":"a1da5b40a7406dc22bd3b36e41e91a8ebf3a1869eb155eaca8f2b536363d0f076287064e1491533b5087d3fb0d8a23e3cfb5098c533a1302713131299fc51526","ssdeep":"6144:/Wl/EmeGKG30xyBU77eGcwvQHxFpcK7s99Ob4EBG3CpNOj0ZgJ3NhpREXgLvR10Z:JU308BNaQRZ7s9sOj0ZgvhpYYJ4","tlshash":"27c409ce73c6742293daf578903f02cb697b29a2b45cc89ab289dce01d3455a5163f7c","first_seen":"2026-09-30T18:20:32.896503Z","last_seen":"2026-09-30T18:23:08.402085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:43.067Z","timestamp":1790792503067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 08:26:43 GMT\r\nexpires: Sat, 25 Sep 2027 08:26:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 467700\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":1507,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-09-30T20:39:50.905666Z","times_seen":28839,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/vendors/revolution/css/settings.css","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.810Z","timestamp":1790792498810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /vendors/revolution/css/settings.css HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:21:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 04:53:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7293\r\ndate: Wed, 30 Sep 2026 18:21:41 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38738,"size_decoded":7622,"mime_type":"text/css","magic":"ASCII text, with very long lines (303), with CRLF line terminators","md5":"50ab0fe78ec795b48d5d5c3b4b535649","sha1":"571f55eec4c2e32b119e0c4baed59732d54fd4ce","sha256":"e202bca6251e2d30a477ee69a8443069faa71104ed008e0e9380c595e515357a","sha512":"f82ed81824350015bc21510b9bf32c914d20c64c1bcdb622a2a197a5105f63ed8c60d6978e148bf151897b4fbc65e88d0320b7df1e1327d6534949f332606c84","ssdeep":"384:eonaLFo+DaCL7p8Wf3NYI6C2RhDe7lcRtp:0vp8WfdYI6Cuh0W","tlshash":"e3039220db0740c2633bdb6827a55b24fb6942378e02086df7ca769d0ff5964c966edc","first_seen":"2024-12-18T04:43:11.025269Z","last_seen":"2026-09-30T18:23:08.403605Z","times_seen":47,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.062Z","timestamp":1790792502062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181757\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.36637.6771b05c4fb05913ee95.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.196Z","timestamp":1790792502196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/en.36637.6771b05c4fb05913ee95.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6aacd600-865\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 18 Sep 2026 06:11:12 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1348, 830\r\ncdn-cachedat: 09/30/2026 05:22:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fa9cf072cab3b4f022169b509c73c129\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":1719,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2147), with no line terminators","md5":"2d51ec5d56bbbf8675ac035a76184243","sha1":"f5a4ebdb742b8a3c9ad43df568472167134fccae","sha256":"10559ae1e0ca4b45848689e8837ac3de63b5cb04680f21dadae8555dbd460b33","sha512":"95d8cc84ce91889cf3790d9a98b1ce08e524d9647d3dc5bdaca532b6026727f7303b8e2f70960880e411f0147b65bb65cfec0ad610aceb1720dccb0a62fe1a4e","ssdeep":"","tlshash":"3e41ea07e110c1f22f37ea297784eccab4f8b69201f6e8ca73564f64d627dd10624a34","first_seen":"2026-09-04T16:28:21.912088Z","last_seen":"2026-09-30T18:23:08.407371Z","times_seen":32,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:52.537Z","timestamp":1790792512537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://crownspring-capitals.ltd/\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://crownspring-capitals.ltd\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 30 Sep 2026 18:21:52 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":532,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crownspring-capitals.ltd/js/marquee.js","fqdn":"crownspring-capitals.ltd","domain":"crownspring-capitals.ltd","tld":"ltd"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:38.875Z","timestamp":1790792498875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crownspring-capitals.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 19:33:05 GMT","end":"Thu, 17 Dec 2026 19:33:04 GMT"},"fingerprint":{"sha1":"DC:B8:52:B5:AC:A3:89:D7:13:38:FF:0C:EE:F2:3B:5D:24:5D:1C:D0","sha256":"67:6A:61:88:C9:74:8C:67:B6:66:E1:0C:C4:74:83:D9:C0:93:4D:BB:C4:6E:72:4D:05:3A:5D:9D:A5:B5:2E:66"}}},"request":{"raw":"GET /js/marquee.js HTTP/1.1\r\nHost: crownspring-capitals.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nCookie: PHPSESSID=09db2bc840920d45179c897b1d5ebd44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"09db2bc840920d45179c897b1d5ebd44"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 04:53:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2541\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12419,"size_decoded":2798,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"46687d9b7e42961ece2fbf13a67dd952","sha1":"40888d01171c2b46157a1b5ad593078ab743a681","sha256":"c1de827cf52f6fbe33c524a6600d6a4d09eac6d75709146a2303770cd189c27b","sha512":"631ee3c26e4770a1769648c56161da170d9e8733438966c4bd0d091d2d29d6f4067f1b728d28580126b1ef99438a0732536ae866a9c991f62fe79e1e131ef3ca","ssdeep":"192:PTfQ6/YSFGUAoJ/x3F7EaWBuGxtXPNGDUdhdk/vg1Xfq16pjjEP:rfQ6gSQodx3PwXPNxdh6/vg1XfqP","tlshash":"de42e1154aae1cf24c2ba0254fdf00e5d7358287a10fed32b85c72947f8d92496bae67","first_seen":"2024-03-03T15:52:18Z","last_seen":"2026-09-30T18:23:08.408552Z","times_seen":101,"resource_available":true,"data":null}},"time_used":2407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-30","alert":"Phishing Block","trigger":"crownspring-capitals.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"crownspring-capitals.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:300,400,500,600,700|Open+Sans:300,400,600,700|Poppins:300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.119Z","timestamp":1790792499119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Montserrat:300,400,500,600,700|Open+Sans:300,400,600,700|Poppins:300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:21:39 GMT\r\ndate: Wed, 30 Sep 2026 18:21:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37924,"size_decoded":2995,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"19224d0ad5fd473e2da5a05fa2b6632c","sha1":"befd985f835c591bf00cf0a701957350e80bbd7c","sha256":"597abda60968f4701476cc9ba94fb98ad1f88e7a64de1d60117532fe18a9f0a0","sha512":"e39c561ca2546704fe7869b786f33da59396dd7d1470dc3f6336cadb2a9995ebdb652297b6ea44573d34f73a116f0d01023bb5e1be2e7bd2bb05126e9e9ca07f","ssdeep":"384:Bb/SjpbAfnbAYqY4tjXqY4ahhqY4tU8qY4k:iosL3Jbch","tlshash":"50033f91042ba80067431cd623ce7e35de0fa2657044d0766bfe5eaaeeead36537132d","first_seen":"2025-09-30T14:10:14.367425Z","last_seen":"2026-09-30T18:23:08.409338Z","times_seen":61,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":48,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:39.297Z","timestamp":1790792499297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crownspring-capitals.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181759\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-30T21:35:53.563329Z","times_seen":347972,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":19,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:41.881Z","timestamp":1790792501881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ab-h6dkmuVc.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfovqJUGAW4ETDB67pGIfxn-HD1wtg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101578\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 02:33:03 GMT\r\nexpires: Wed, 29 Sep 2027 02:33:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 28 Sep 2026 19:51:53 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 143319\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292791,"size_decoded":102419,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"e07202748f52b275a366dc765dedb884","sha1":"8768bb00ab50be7dda6103811f5cf3ee6b2a11bf","sha256":"9561c041bc10fdca6bd46059bcf9ab2c596a4251efe7260a00979ce2ab0663c7","sha512":"d550d20f48c2998189902c4aa1c7707eaa0ae68b066848cc8efe56806c6f8efb636713a0f66f7aea54dde10af65856ea6ddc0cfef77456cfd5d4feacba13c7c5","ssdeep":"3072:mL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:NzOzvVwIuTKB","tlshash":"c254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","first_seen":"2026-09-29T03:06:52.258789Z","last_seen":"2026-09-30T18:23:08.410148Z","times_seen":79,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/81263.9e01ee49ebd4794490f2.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.185Z","timestamp":1790792502185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/81263.9e01ee49ebd4794490f2.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: zstd\r\netag: \"6aa8e354-b07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 15 Sep 2026 06:19:00 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 04:51:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bc9af1b269eca4dbd27d862b753b4312\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2823,"size_decoded":1607,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2823), with no line terminators","md5":"279d7730ab956fbe0783849131f5368a","sha1":"a4a0a8b68f896d0b698cf23dc79e3c320196aee8","sha256":"1aaa925fefbcc11b9bcb680db2ec4b38d4287019ad4fd0a4f74dc31d7f5a27af","sha512":"c5e66c456657ae016e4d59f269a45fdc04fea343099d3c2ab32c7b7e513c1db2065b3dd2759ece4f4ce6adb0028a748e9fbd478a95effe881c5cd0782bb73269","ssdeep":"","tlshash":"7d51cbdef784843eec63c24b668d23de521d1d81a71bb128e3a7ea7ad40ce4815157f4","first_seen":"2026-08-17T13:14:11.782821Z","last_seen":"2026-09-30T21:42:10.937488Z","times_seen":1173,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":5,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:42.867Z","timestamp":1790792502867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-09-30T21:30:41.478732Z","times_seen":102532,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":4,"connect":24,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026_ng=1\u0026tid=G-2VT5C0V7PC\u0026cid=2089852136.1790792503\u0026gtm=45je69t0v881649833za20gxf1\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153~121280969\u0026z=1964808118","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:43.235Z","timestamp":1790792503235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026_ng=1\u0026tid=G-2VT5C0V7PC\u0026cid=2089852136.1790792503\u0026gtm=45je69t0v881649833za20gxf1\u0026rcb=14\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153~121280969\u0026z=1964808118 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crownspring-capitals.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 30 Sep 2026 18:21:43 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-30T21:36:18.005408Z","times_seen":1082683,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crownspring-capitals.ltd/","date":"2026-09-30T18:21:45.100Z","timestamp":1790792505100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:21:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fca40181c727cc29b69045ec5589f638\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 468396\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4353fc4ed3d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23816,"size_decoded":6019,"mime_type":"text/css","magic":"ASCII text, with very long lines (23816), with no line terminators","md5":"fca40181c727cc29b69045ec5589f638","sha1":"83aaec5320016a15845195eb1d3fbb8982b66fa3","sha256":"a8c70c82d9bd2a2ef3e4edbe3cdb060bdcca80a3351307d066eee3df4be8a8d0","sha512":"32f6a558154dede9ec9cad1177d1142b7c949d431d8a3e9ed7cfc31ac62bb8ffe2cc501c18a86a26523bba0b0d61f6ea1238e8fec3ab5cf531531a5b6990140e","ssdeep":"384:gZBMbrYbv+esY2jcWlnrCxN82TNSixi7rOPJh3L:giUAEh3L","tlshash":"a2b21da3b5d714dce657c236c0d5f67ca82b4a60c753c6a3b9037bb886c1ad73641a4c","first_seen":"2026-09-14T08:43:43.747289Z","last_seen":"2026-09-30T21:19:11.373367Z","times_seen":751,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/country/JP.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tradingview-widget.com/embed-widget/forex-heat-map/?locale=en#%7B%22width%22%3A%22100%25%22%2C%22height%22%3A430%2C%22currencies%22%3A%5B%22EUR%22%2C%22USD%22%2C%22JPY%22%2C%22GBP%22%2C%22CHF%22%2C%22AUD%22%2C%22CAD%22%2C%22NZD%22%2C%22CNY%22%5D%2C%22isTransparent%22%3Afalse%2C%22colorTheme%22%3A%22dark%22%2C%22utm_source%22%3A%22crownspring-capitals.ltd%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22forex-heat-map%22%2C%22page-uri%22%3A%22crownspring-capitals.ltd%2F%22%7D","date":"2026-09-30T18:21:42.345Z","timestamp":1790792502345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /country/JP.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://www.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.tradingview-widget.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 30 Sep 2026 18:21:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"8e5eebf19774ef3286f456604a61341f\"\r\nlast-modified: Thu, 11 Jun 2026 10:27:08 GMT\r\nx-amz-id-2: cxnSQLloroaLiGh3kdpP5HeapVoGgyx1LjxwcGY59qY3gXzSkT3/RwWaA6gLsdxgQ0oYYsUrCkI=\r\nx-amz-request-id: 0BHKVJY979ADYMR4\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 8e5eebf19774ef3286f456604a61341f\r\nx-amz-version-id: dMuak.3I5pdwc2MkdnGbv8PiXot7QaqT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1234, 830\r\ncdn-cachedat: 09/30/2026 04:52:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a660d68731b844f907edb2f358bbe314\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":343,"size_decoded":1203,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (343), with no line terminators","md5":"8e5eebf19774ef3286f456604a61341f","sha1":"4a1dace3065eacb2060b46a9c2e27f3980b1d1d7","sha256":"5f3493794d3ba827510c6ccad5840ad7ee6735fb7ad48cdf9ac2b6f397c4376c","sha512":"4bec5f06fb6d21de411b5698bf8d5290111118fb438a717192e709fe7b697ffb8aa0d668dd9796d0ab245962679f55405497b4d94528bdc27bb6b610fe4eb30b","ssdeep":"","tlshash":"7ae0d8b8a22cd51d98578b7816581091535d50f7b08404f57d4d5a3161061dbf857d84","first_seen":"2023-05-01T20:32:00Z","last_seen":"2026-09-30T18:23:08.412823Z","times_seen":3237,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":15,"connect":15,"send":0,"wait":2,"receive":-1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}