{"report_id":"8514b98e-139f-4ae9-bac6-dcd31caefa66","version":6,"status":"done","tags":[],"date":"2026-03-10T09:54:18Z","url":{"schema":"https","addr":"keltrustcapital.com/login.php","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":0,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"keltrustcapital.com/login.php","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"title":"keI-Trust Capital | Online Banking Website","dom":{"size":16461,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10705)","md5":"3b9df4ca07138d5f6fedb78c4a1ee4fd","sha1":"0dc5652c4674476270a7740e472f0ce2f42d5fe0","sha256":"832ea628a6005dce9ae1a5f39a8d6a078e473a99f5bce7eb36be38767d56867e","sha512":"aceeeed08c46de29ec9c3b443871f3b779c8d30fdae616fb4297b2d9a4f3ef4f6f12c7a3d07699c219d0b0b6e6ba959911ddb393a6240abf354df9a2c9b3bd40","ssdeep":"192:4SYNvrx0uGOAVWKSUMtphtpHba3DRfpZXjdNUe6RdCqafFpP9bLERr:odLUuuRzdNU/DCq0Do","tlshash":"547275634c851199e1138ed5b6d81b6876288353ee920edeb2ac301ecfc2fcd51a771b","dom_hash":"domhash98997ebd9dce7600f7f7308a1cc5bae4","first_seen":"2026-03-10T08:22:54.8161Z","last_seen":"2026-03-10T12:32:31.863916Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"keltrustcapital.com/login.php","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":0,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"tags":["soteria"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T09:54:18Z","useragent":"Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36","referer":"soteria","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":5974,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"keltrustcapital.com","ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2025-06-22","domain_rank":0,"first_seen":"2026-03-05T14:30:02.604993Z","last_seen":"2026-03-05T14:30:02.604993Z","alert_count":17,"request_count":17,"received_data":475522,"sent_data":10175,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":3,"received_data":119961,"sent_data":1863,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-08T23:03:03.103779Z","alert_count":0,"request_count":1,"received_data":90255,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":1,"received_data":41825,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.pixabay.com","ip":{"addr":"104.18.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-10-07","domain_rank":298908,"first_seen":"2017-01-29T11:20:46Z","last_seen":"2026-03-09T19:46:48.966532Z","alert_count":0,"request_count":1,"received_data":40923,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/authentication/form-1.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"adb3d345dbb12f5ab12ae962025fa343","sha1":"8969e1e8cb1289c726b1f1d3c118c5b92447c1c7","sha256":"fcf996196d2a53e87cf22a9f7635f7d72ade19ea3c049915a412e14563c5d165","sha512":"59204e1407fe75e2621da5d1306c160e8422c458530fe54218df070cce1de99f3aee6711755b6decee913dd95e9c04cecf97d2280318e4cead7c7f149f068347","ssdeep":"","tlshash":"0be08ca729410c36fb6af7619135162af835c01b0a12c14579a8caac3636dd348a5b97","size":307,"data":"","first_seen":"2023-03-08T23:46:32Z","last_seen":"2026-07-07T16:33:02.811998Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/bootstrap/js/popper.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","size":18994,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-10T23:04:00.839491Z","times_seen":6966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/bootstrap/js/bootstrap.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63467,"data":"","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-08-09T15:58:06.424127Z","times_seen":10823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/loader.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c788f6b381d7ad1cdd09bf7f502973ac","sha1":"6cea43fc1233133a87a12c10238bc5c141f488b4","sha256":"ac60a85e0f651158b33ae8cd78cd1a82a8648b91514798c76c7c7407e6d5e047","sha512":"792f9bc54b048c9f3a528a3b7bd0a4f563007a52195ac14e674cc918ea02d47ef95d2d4bf999ab34b7896410010390c56516b3b22904e5156a68e19db01f3319","ssdeep":"","tlshash":"e1c08cf623228b30929b3e233369a318297001039800f803a08c44b4ee70fc35807cc0","size":156,"data":"","first_seen":"2023-03-09T14:07:56Z","last_seen":"2026-07-09T11:12:13.350378Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/libs/jquery-3.1.1.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-10T23:09:53.71897Z","times_seen":147190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-10T22:50:35.86705Z","times_seen":11747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-08-10T20:46:01.114798Z","times_seen":34230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/forms/switches.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/forms/switches.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1250\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (335), with CRLF line terminators","md5":"e998ae7c66c7a1c2c694f4c2ea76764d","sha1":"f8e7034092c985075d648ae15281916d20118f00","sha256":"a0666a558cda37b0d7f418fe026dc2b0dd61cec0c0d9849e3c0871d3bcabf6ed","sha512":"44d79f20908da54eeb74a0d1d598129ff6f8a1503b8e736582e2f980d9483662a10c4b0732802c029d6442bf1c9f9d2f24c95158d14ce0d367bc940b59ed287e","ssdeep":"192:d9z0HAPlSgf1eizKEjksS06n1L8ovK3mr:nwml3Jj/gr","tlshash":"7ef179b69170400d753682a5fbc4cb52eb6f21b5a50c9b35fab71428ce712c4fc3a6e8","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-08-06T12:25:23.996273Z","times_seen":777,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/loader.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/loader.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 196\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cffa592496e1e5afa152a848e0319948","sha1":"2c5bb8b6ece5d2b94bf9203494753c1eee8eb4f5","sha256":"05d49a3761644b5ab5e69014d5ef7137220e30da1452802acdc7c8dfbf1877f4","sha512":"8aff3862ec39ded42fb946ec84833784d6b32523681b649c1636b55c7669965a557cec25bfeb612ccd89170fae72a96021c2e735e26552292b70da9def775552","ssdeep":"","tlshash":"aae02b78862b91500336c5961fa86514c6e45153870a210bf6dc125fafba15154bdf90","first_seen":"2023-04-16T02:39:45Z","last_seen":"2026-06-12T22:52:22.942714Z","times_seen":140,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/bootstrap/js/popper.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/bootstrap/js/popper.min.js HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6545\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18860)","md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-10T23:04:00.839491Z","times_seen":6966,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/bootstrap/js/bootstrap.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14365\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63188)","md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-08-09T15:58:06.424127Z","times_seen":10823,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/structure.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/structure.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/ui/assets/css/plugins.css\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6107\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e77aca51b48408a18a22e6500aafe790","sha1":"a6cb9b9810d4feb0401844c53e4647fb864db87f","sha256":"8751d18e6d7af1c9f0963fc6eed9e9622b6c733aa99df4b8a141de93e70ae346","sha512":"36314b9a14bac22081e6ad715af1aedd6cf41c21840b111af07bead5e0cc53c5aecb0168487e09f47514b1f5ad74560e5efdae5e54d0a10ede3c5f6f455b7796","ssdeep":"384:TuDN0nVit+1xRdxKVA+vvaKM7aBZRq7bIyXQW:iqVio1xRdxKVA+vvaKM7aB3q7brXP","tlshash":"dc0372a9c981340421b1622cbfd65b16df9b05938a02c57b7a7f5688aff73188875fcc","first_seen":"2023-10-19T13:13:14Z","last_seen":"2026-06-12T22:52:22.94409Z","times_seen":142,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/plugins/highlight/styles/monokai-sublime.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/plugins/highlight/styles/monokai-sublime.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/ui/assets/css/plugins.css\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 399\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c8b4c0e8a584e7142b08d914644cd9d","sha1":"e4f3df87cbfa634c86b489e9cc43acf44d415986","sha256":"fe66aef28788cf660b2383fefb69c360a3c1262f17aee1d3aea7cde5bdc914c0","sha512":"194aea2207279471d9292993719b7e031528cd8d63cae4b0cfd79c25dd48c1af2b2047c33dfb9c5d5888287ce6115e04a5cc3d9040e8ab590d7d050fab5f4496","ssdeep":"","tlshash":"7911c0429b720f1234efc99b28869eb5fe9f9cc15d980bf92bbc50390809412f538d5e","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-08-06T12:25:24.005884Z","times_seen":892,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://keltrustcapital.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39152\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:50:01 GMT\r\nexpires: Fri, 05 Mar 2027 08:50:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:48 GMT\r\ncontent-type: font/woff2\r\nage: 435836\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39152, version 1.0","md5":"acfce21e9f6eaf62a1058b502b920e06","sha1":"c67f96573543ec91b416b0da07f979f80b89b6b6","sha256":"20fc9b6fc618e7c3c68d3ac750a2a5dfbceb8521675458d2cea580b5693e4798","sha512":"213daf669f64b3d1c2e86311afdb173873ee379bccd1e7c2a891bb17cd5f0c01e485bbed331b34aeb8cf0ff7b8962fefa136533e9b9218174eb6a72cf3c5eb00","ssdeep":"768:8oje8HA6B+ldUVqnpuc8oq8OlKJZejd5sSuSbccIeC8MQ:8oy8Hf+DcqpWo3OWZc/sscccQ","tlshash":"a603f13825463274fa888f297b2485859d2c3cd68d25e9339cefa35d2302d7915bbdec","first_seen":"2025-09-17T21:27:48.949651Z","last_seen":"2026-08-10T20:40:57.835597Z","times_seen":3284,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":223,"dns":1,"connect":43,"send":0,"wait":45,"receive":52,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/authentication/form-1.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/authentication/form-1.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1266\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5998,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"15bcb2b7b1abbe39d1238e19a9c96af2","sha1":"36f419725d8135febf5460ff1c004fe342eb2cae","sha256":"2f38722eecda4ba5755bcf92f2d0a43a7e83da32dd8d59ac1c0750aecf941a6e","sha512":"ef7f96604ad27c797ac08e308f28765d21e7d5a87ab7bf8dad05b1a052b343d3ed0cb6299902958c21c88c30a038a736bb9a9a4f7cb29e7670f0e314c17649da","ssdeep":"96:8LJOog0c4/Lr1kMOrFeWN4cy/qeo4CZSGFI0zlyjHX:8LJOog0cOyMOQWN4c1cCZSkByz","tlshash":"1bc18c555630910934338e69bfe967c8eb1c1053968b123e7a507bdf4fae03b52b2bd8","first_seen":"2023-10-19T13:13:14Z","last_seen":"2026-06-11T11:37:48.639507Z","times_seen":128,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/forms/theme-checkbox-radio.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/forms/theme-checkbox-radio.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1273\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6912f3db621563ba40cf7d93bffb0904","sha1":"f629d9dfc9d86309388204ebd095e2d19287486f","sha256":"a843b69177d7d864767d0b57dcca9da5f278fe01c2e806c4925d7c94000eb09c","sha512":"741a5707a09e02a4da9ed2beee28563fba99f4acc33d64af16ee72ed46f2b3a380e6b1d954ac046f5a6b7a6b03c4d219f71bd94dd88ee5fe61c618f7cdab6d8a","ssdeep":"96:w7dopFtFOrrmIQAmYqDDkWtHiFzF1/6oXAsC:w7dvnFQAMDDkWtHA/6oXAsC","tlshash":"8342083bb52d02e221b261787edfc1419325cd97a3402aaa74de79311ffa4853523afd","first_seen":"2023-10-19T13:13:14Z","last_seen":"2026-06-12T22:52:22.954599Z","times_seen":142,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/loader.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/js/loader.js HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c788f6b381d7ad1cdd09bf7f502973ac","sha1":"6cea43fc1233133a87a12c10238bc5c141f488b4","sha256":"ac60a85e0f651158b33ae8cd78cd1a82a8648b91514798c76c7c7407e6d5e047","sha512":"792f9bc54b048c9f3a528a3b7bd0a4f563007a52195ac14e674cc918ea02d47ef95d2d4bf999ab34b7896410010390c56516b3b22904e5156a68e19db01f3319","ssdeep":"","tlshash":"e1c08cf623228b30929b3e233369a318297001039800f803a08c44b4ee70fc35807cc0","first_seen":"2023-03-09T14:07:56Z","last_seen":"2026-07-09T11:12:13.350378Z","times_seen":155,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15e40\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\nage: 3033917\r\nx-served-by: cache-lga13629-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 20, 46222\r\nx-timer: S1773136437.265463,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-08-10T20:46:01.114798Z","times_seen":34230,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":33,"dns":1,"connect":13,"send":0,"wait":14,"receive":10,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/plugins/perfect-scrollbar/perfect-scrollbar.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/plugins/perfect-scrollbar/perfect-scrollbar.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/ui/assets/css/plugins.css\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 568\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2611,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"478a1d45a07ce978baac700f32978f96","sha1":"06f09d24ad5732d5329b65cbd487d6d87a5b5690","sha256":"337a4a19bf6614188008d54e59b269e01cc12b4990394f1afec908be009b246a","sha512":"22a40ccc79f7154d535dec01208e793aace9a76aa31525a9a3632540dac1d9bfb9cabfc2c9493023d828feabd85ccc88b88751edef1884f22ca371933d2c07b8","ssdeep":"","tlshash":"f451cdbb96952681321b669f1beee745333f00c2be47ca5cb69730c46b033ee1536584","first_seen":"2023-10-19T13:13:14Z","last_seen":"2026-06-12T22:52:22.939684Z","times_seen":136,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://keltrustcapital.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39152\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:50:01 GMT\r\nexpires: Fri, 05 Mar 2027 08:50:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:48 GMT\r\ncontent-type: font/woff2\r\nage: 435837\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39152, version 1.0","md5":"acfce21e9f6eaf62a1058b502b920e06","sha1":"c67f96573543ec91b416b0da07f979f80b89b6b6","sha256":"20fc9b6fc618e7c3c68d3ac750a2a5dfbceb8521675458d2cea580b5693e4798","sha512":"213daf669f64b3d1c2e86311afdb173873ee379bccd1e7c2a891bb17cd5f0c01e485bbed331b34aeb8cf0ff7b8962fefa136533e9b9218174eb6a72cf3c5eb00","ssdeep":"768:8oje8HA6B+ldUVqnpuc8oq8OlKJZejd5sSuSbccIeC8MQ:8oy8Hf+DcqpWo3OWZc/sscccQ","tlshash":"a603f13825463274fa888f297b2485859d2c3cd68d25e9339cefa35d2302d7915bbdec","first_seen":"2025-09-17T21:27:48.949651Z","last_seen":"2026-08-10T20:40:57.835597Z","times_seen":3284,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":303,"dns":0,"connect":58,"send":0,"wait":69,"receive":23,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/img/favicon.ico","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:58.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/img/favicon.ico HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:58 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 486\r\ndate: Tue, 10 Mar 2026 09:53:58 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"931ea8cd3a41718c6ce90b75f62066b6","sha1":"e6f689b5240837b501e19cc72dd2824181165428","sha256":"34dd7cba33d56d5d7adbf18467a2a406c5718688ae96e9f3efff200c01caf550","sha512":"e120a76649de10222cf67370baa83280d9b22846ae33daf864c09f4569ece206c690c21d59fcde97dfc3471d510e14f511a3c6eb464f72bee46443c796abc494","ssdeep":"48:hlVygkEKUKMl4pDL9yOUIySXyiea+F+QqoDvrhCjes:hb5GpmTwxj3","tlshash":"3291871c73306057cb03557cde62c17a0a186cff442823f8a13a324bbb5a2b5cea2831","first_seen":"2023-05-25T00:06:52Z","last_seen":"2026-08-06T12:25:24.01288Z","times_seen":835,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/login.php","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T09:53:56.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1718\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 10 Mar 2026 09:53:56 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":6138,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4288e04b311774e5ef2b72b319c6029f","sha1":"393738b0ef73239ee7cf1957a5dfd8a9e256055b","sha256":"f8973e39c00f75cc3b8d91fec56114fbc7a2228dfae6dc2022571935d659ad47","sha512":"2a8f7ca7ca580d7614017c0a0aaf89b9e2850084be5c54397f8715bc4bfd0c8c33cb20e7a750a265bd3c41cdea431ea75438a2e90b52429b6e832e02047b2d18","ssdeep":"96:ByCqaTlWteuouMkTONldrkKWEybkYGDSk:ByCqaTcppMYiDr6EB","tlshash":"ccc1402218c5483a413389c49db47b6cff918207d70a5918b1fc276b7ffbd849817a6c","first_seen":"2026-03-10T08:22:54.817468Z","last_seen":"2026-03-10T12:32:31.875808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":223,"dns":1,"connect":111,"send":0,"wait":120,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/authentication/form-1.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/js/authentication/form-1.js HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 128\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":307,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"adb3d345dbb12f5ab12ae962025fa343","sha1":"8969e1e8cb1289c726b1f1d3c118c5b92447c1c7","sha256":"fcf996196d2a53e87cf22a9f7635f7d72ade19ea3c049915a412e14563c5d165","sha512":"59204e1407fe75e2621da5d1306c160e8422c458530fe54218df070cce1de99f3aee6711755b6decee913dd95e9c04cecf97d2280318e4cead7c7f149f068347","ssdeep":"","tlshash":"0be08ca729410c36fb6af7619135162af835c01b0a12c14579a8caac3636dd348a5b97","first_seen":"2023-03-08T23:46:32Z","last_seen":"2026-07-07T16:33:02.811998Z","times_seen":148,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/bootstrap/css/bootstrap.min.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21653\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":161409,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"d432e4222814b62dd30c9513dcc29440","sha1":"2cac4afc120983921411296bd4e8fd8a94ba237e","sha256":"4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601","sha512":"3f9320327d6304dd356ac060534cfad10938431897a3cebec2515a84aaec41fdfb73d72ba39d7b5b35523cf575b432b3864bb6889d855602faef01b4dd21a734","ssdeep":"1536:iC7AIJkTR+rMqFVD2DEBi8yNcuSElAz/uJpq3SYiLENM6HN26R:d7XXGLq3SYiLENM6HN26R","tlshash":"8cf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T05:11:52Z","last_seen":"2026-08-10T14:09:15.533241Z","times_seen":13645,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/plugins.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/plugins.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 172\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4e4a1a5c2b404a77ccc103b770b6e7ca","sha1":"870c272137486352e6d8413cf580a6fc6e56c40c","sha256":"f55ceb31835b83a6a75f27fccdaeb6ef2bef082453aece54346a35caf89237cf","sha512":"53586a1765d13839e8dd8d99b4193ad4091ffd65abea0d34445a4e87988e22475b7bf96914e2e7db0cc1df692ec310a0f123a99e23a8843268c2292a6afcdb2c","ssdeep":"","tlshash":"66e0260ad85022a103b6841718682b1a535c1ec67b5eb134393c637c2bad5bc812411a","first_seen":"2023-04-11T05:10:53Z","last_seen":"2026-08-06T12:25:24.000267Z","times_seen":832,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/sweetalert/2.1.2/sweetalert.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://keltrustcapital.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10494\r\ncf-ray: 9da16f6cbe9749c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ff8-9f68\"\r\nlast-modified: Mon, 04 May 2020 16:16:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 545943\r\nexpires: Sun, 28 Feb 2027 09:53:57 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xr1geYjkrY7k%2Frz30BtAbyVOA9uu53yPyMGs32P%2Bh8KFRPXgy5kiMRHhk7DQFkrKLFOy6EK%2BQxIidnWAEffSlBKxRwaq6EJ1FsJYk8WZ2DOEwP5RtfUUh2oNsGsw9asi5SOImuNi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-10T22:50:35.86705Z","times_seen":11747,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":23,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/js/libs/jquery-3.1.1.min.js","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/js/libs/jquery-3.1.1.min.js HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/login.php\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29460\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-10T23:09:53.71897Z","times_seen":147190,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keltrustcapital.com/ui/assets/css/main.css","fqdn":"keltrustcapital.com","domain":"keltrustcapital.com","tld":"com"},"ip":{"addr":"148.72.153.160","port":443,"asn":30083,"as":"AS-30083-GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keltrustcapital.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 01:44:53 GMT","end":"Sat, 23 May 2026 01:44:52 GMT"},"fingerprint":{"sha1":"3F:79:39:F1:56:AD:65:23:A9:6C:A9:36:43:65:B6:FA:0F:D1:E9:23","sha256":"57:44:89:7C:49:17:89:7A:D1:2C:65:14:DB:67:19:42:3C:F7:F5:82:31:73:55:5D:D0:0D:44:7F:81:C7:E3:61"}}},"request":{"raw":"GET /ui/assets/css/main.css HTTP/1.1\r\nHost: keltrustcapital.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/ui/assets/css/plugins.css\r\nCookie: PHPSESSID=a52a28c2c95992c0db77d79bc7a05945\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Mar 2026 09:53:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Jun 2024 07:42:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8604\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58917,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (383), with CRLF line terminators","md5":"3fc8389635325ca504bb850d2e16c9b0","sha1":"7f77d0d3cbccac76edce5eab3c703aa7070ae434","sha256":"bedf5c7835f4d2ef4ad33d2c4e152ae09cbf0e3081084f6e5c51ff5122d6f0bf","sha512":"6a589ae11dc98c4ad55805c48167f722b33b8bfd0bbb3852d7653819d02c980beadea4c586527c39abc9ec1dc1a6a374ba23c5604180ededf3b53263f327e622","ssdeep":"384:XzuaqzmNV8ABSYshUkvSlD8S+WYr8Avrgce0:X+zWBSYsUZ+J8bC","tlshash":"414343b9fa80214731338b68a3a2ddd3efaf12d39901077e7b5562904bb919c1d34f99","first_seen":"2023-10-19T13:13:14Z","last_seen":"2026-06-12T22:52:22.945623Z","times_seen":141,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"keltrustcapital.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pixabay.com/photo/2015/12/10/16/39/shield-1086703_960_720.png","fqdn":"cdn.pixabay.com","domain":"pixabay.com","tld":"com"},"ip":{"addr":"104.18.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixabay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 01:28:51 GMT","end":"Sat, 18 Apr 2026 02:28:48 GMT"},"fingerprint":{"sha1":"64:B1:A5:A7:6E:D5:47:6A:E9:AF:33:5A:0F:29:66:FD:27:8C:A5:EB","sha256":"CB:23:12:F7:A8:CE:87:1C:4F:2C:5C:84:F0:F4:F6:FE:2D:C1:63:83:A1:69:EE:DD:D3:4F:2B:F4:DC:20:1C:59"}}},"request":{"raw":"GET /photo/2015/12/10/16/39/shield-1086703_960_720.png HTTP/1.1\r\nHost: cdn.pixabay.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 39722\r\ncf-ray: 9da16f6fad6c4c11-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4480492\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\ncontent-disposition: inline; filename=\"shield-1086703_960_720.webp\"\r\netag: \"ed6e93638bf6780a9bc8178456bc01a6\"\r\nexpires: Wed, 10 Mar 2027 09:53:57 GMT\r\nlast-modified: Tue, 11 Nov 2025 15:23:10 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=74006\r\nx-amz-id-2: fN0VO1B2o9jve/h4qkf8npynweouqQCAi3tf7yjFe+ESv47Gy7qtec5mRArf+i25CJ7/28Ie34s=\r\nx-amz-replication-status: FAILED\r\nx-amz-request-id: WQGDFSF5PJ8H8EJ6\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VM3pbi9HF9xVEOF4P4ERt9upIdVCLHJU\r\nset-cookie: __cf_bm=uNSsasOk_dPHjiTH.lRzruVrdRAu84W0iqT8X.WLxFc-1773136437.7036088-1.0.1.1-4pObwtsjlD7oiOLBFZ_C5RnPwPHiuwkEif5QoKyfSMxL5raJPu97rO_5Y.90SVOUU.UN4bwaJnJBgC1fDEWFtWNcgphGGkoRpJL2DdpwltOApi3t7gwuDxhSbxS5Dz0A; HttpOnly; Secure; Path=/; Domain=pixabay.com; Expires=Tue, 10 Mar 2026 10:23:57 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"061b79bf25e26b8f04e21557b3f9a677","sha1":"3a55b58b027af0d8cfa7d006df41bb9881b5163a","sha256":"aec9361a82ffbeaa7e3744635a4922a26dfc41981044e503691e22859d788b25","sha512":"75d6475320e5323ebcd8f41c8655abb67d42c61943f9afbc3c67bf33cd1cbd34195fe8b4e9d591dd47ce4e13c4e03ba542a2dff31e0c55b2354921eb14330eda","ssdeep":"768:U+HE9ThXBsCn4NZskMlZa6Byvs2SuoF49eMgcm4MfsxGgjPCEgghAcLeMU:U+HiThPnPkcOvBSVhNOPCEduciMU","tlshash":"18030204be5d22e1acd0487c4a48435ff8a83098dd01ffd8eaadb95e71c7e86020c9bd","first_seen":"2025-09-06T05:21:55.948375Z","last_seen":"2026-04-15T10:20:21.956916Z","times_seen":119,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":30,"dns":13,"connect":1,"send":0,"wait":25,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaBTMnFcQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://keltrustcapital.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39152\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:50:01 GMT\r\nexpires: Fri, 05 Mar 2027 08:50:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:48 GMT\r\ncontent-type: font/woff2\r\nage: 435837\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39152, version 1.0","md5":"acfce21e9f6eaf62a1058b502b920e06","sha1":"c67f96573543ec91b416b0da07f979f80b89b6b6","sha256":"20fc9b6fc618e7c3c68d3ac750a2a5dfbceb8521675458d2cea580b5693e4798","sha512":"213daf669f64b3d1c2e86311afdb173873ee379bccd1e7c2a891bb17cd5f0c01e485bbed331b34aeb8cf0ff7b8962fefa136533e9b9218174eb6a72cf3c5eb00","ssdeep":"768:8oje8HA6B+ldUVqnpuc8oq8OlKJZejd5sSuSbccIeC8MQ:8oy8Hf+DcqpWo3OWZc/sscccQ","tlshash":"a603f13825463274fa888f297b2485859d2c3cd68d25e9339cefa35d2302d7915bbdec","first_seen":"2025-09-17T21:27:48.949651Z","last_seen":"2026-08-10T20:40:57.835597Z","times_seen":3284,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":308,"dns":4,"connect":57,"send":0,"wait":44,"receive":25,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito:400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.202.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keltrustcapital.com/login.php","date":"2026-03-10T09:53:57.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Nunito:400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keltrustcapital.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Mar 2026 09:53:57 GMT\r\ndate: Tue, 10 Mar 2026 09:53:57 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Tue, 10 Mar 2026 09:53:57 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5211,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a0c4a4346a1aee052f067816456c56fb","sha1":"70870be6f4531b52b58b13e2b687fe33beedf12e","sha256":"fdd8d98e7f5562fc70dfa1828fcf3606386d3a10d33652697f713c4dc5f2c9c3","sha512":"5954ff9f6404f20dc16f0f86cf46dfea3443d23467395722516729d8678cb9b2c4204155819f75371cc083baf6d5e749a0f8a4ee4b5d2e9c462182aab26c4663","ssdeep":"96:BOL8xOL9XMFZOOOLfOL/Jc+uaOLkKNqOxT8xOxT9XMFZOOOxTfOxT/Jc+uaOxTkw:k809x7abm38G9x14bUM859xyDb/m","tlshash":"0ab18aa1145ad40067432cc26bce7e36dd4fa11434589476effd9898eca7d272264f8e","first_seen":"2025-09-21T14:29:48.362542Z","last_seen":"2026-03-22T14:24:31.735314Z","times_seen":106,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":309,"dns":1,"connect":44,"send":0,"wait":65,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}