{"report_id":"8646907b-293c-4af4-92c6-3f661e4af7cb","version":0,"status":"done","tags":[],"date":"2026-07-12T17:38:18Z","url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"final":{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"title":"Capital-vaults is a global leader in online financial trading and investing, offering FX, indices, commodities, and more. Being around for more than 20years and available in multiple countries, we pride ourselves as the best in financial trading and investing.","dom":{"size":41920,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26399)","md5":"09f65b76bd3c504afeecf5d33358fcbd","sha1":"7a7af875980afc36c168c7b20d0abcf757ead57b","sha256":"b1ce1ede228c5b8758898286d2c89c3888320dd9a87a854f1b61d372deea48d0","sha512":"1bcc14185c293bde62403c6168e12b49e6ad49e823a78af39dc5524a4bee664008b2ae05cd84eba6d99748f619ad84580a4bad2a9242baed7b83f90a5b864247","ssdeep":"768:0yJi2qbCmmWq38FTbfsTO+hDGq3t8UtN2v3k/SR+D/5km5M:FJzqbCmmWq38FTbfsTO+hDZ3t8UtAk/a","tlshash":"e213a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-07-12T17:38:27.797532Z","last_seen":"2026-08-02T04:16:37.838037Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:38:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"52.58.184.107","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-07-10T06:27:58.602974Z","alert_count":0,"request_count":1,"received_data":1664,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-10T06:27:58.796857Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-07-10T06:58:01.854451Z","alert_count":0,"request_count":1,"received_data":7732,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"capital-vaults.top","ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-07-12T14:19:26.941818Z","last_seen":"2026-07-12T14:19:26.941818Z","alert_count":45,"request_count":45,"received_data":3558188,"sent_data":57945,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-07-10T06:57:52.715176Z","alert_count":0,"request_count":4,"received_data":329028,"sent_data":1885,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"51.102.228.32","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-07-10T06:57:52.752075Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":633,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-21T13:02:20.446331Z","times_seen":9549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-t6WxLABA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253d4d9d6ea32e484f0be9a0320a7a7","sha1":"762fb8fdf15626507c1c26a66aa7fe399d39e803","sha256":"1fb0b8e426f707feea50785bc24016fe14a76fb763d5eca3bc9b1d265bf77fa2","sha512":"5a1592fc87a402c636315def22f3c60dd7eeda34701b08005a192ae060acbe7ed8ae8aa709cc1664c3d9489c641e1ada60e79c66f13073ab61e6ba5bd86f524d","ssdeep":"384:9rgi5RFMkSjJOE/0BW2rkZZ795P6zrnBOVmPCRkXQbpaIF2K:9EizlSjJOEiWYoR5P6nnBOVmycQbpaId","tlshash":"0272d7742700783f711f489e16ade546b232c29dd693892d9b6fec0976c5cc0a8b37b9","size":16281,"data":"","first_seen":"2026-07-07T11:50:17.711459Z","last_seen":"2026-07-27T07:27:47.896741Z","times_seen":1890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-CgMCAfor.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c5668b0e6d3383e096c45abdbedf9d","sha1":"8d64309e8ec50da59f799336c11685ca7fd15ecc","sha256":"2724b50edb69a23cc951a77f775727b960c857d18d58cfa9a47fe5c094d9b99a","sha512":"c4a86d25f4e86be36db19539b4e3efc70500a48b9664349043d76a1451f8536c8bed7fe22f8ca790fb3ac7e26fa7efbfc37e0c927687966dc08a02442e15f85c","ssdeep":"6144:mLjnOEIL18ad2jJKaQo+tRkYcuBaay+moJG:iOEIZRd29lqj4n+moY","tlshash":"53443ad53294b035439b51e6906f1106f33e5c58580d812cf269ede678baec8a2f7fb8","size":272133,"data":"","first_seen":"2026-07-07T11:50:17.748529Z","last_seen":"2026-07-27T07:27:47.884385Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/js/jquery.bundle.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cc346b8332f1665a9cbe2cf624887af","sha1":"ff683279745ed35fdabf5f0ee0b9c3b1d7c75516","sha256":"cfde097034cb3fec4b0d408729176ada7c403933b5632fdabd40f200fc55ba9f","sha512":"e70bd659e91c64f83bd0a50da377a70ee0ae6c6568fd55700e55840aa672db732abe86e81bef724101a81e11a9c8d9a8627f3af740558268e43a0665fbd0d717","ssdeep":"3072:y4J+03jL5TCOauTwDhFdnCVQNLa98HrjY0GFvZwlQocT5frjt:40zEOQR+iLa98HrjQAlrcT5frR","tlshash":"98341a89b3a1306287ab70f4516f010bb13668adf409887cb569d8e57db8d8d607bf7c","size":239012,"data":"","first_seen":"2023-04-27T10:46:44Z","last_seen":"2026-08-02T04:18:16.766006Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"bea9a1caa603791cc53ff0b5bcb884ac","sha1":"66d0bba5180107a98fa6e66acef3dfa007b33799","sha256":"3b0ddc82db7d651c295476b760d3be0750ab36e731d830e7c965d6dbfff41c48","sha512":"825bee72d377d77371db8c0c17e9067dff15693f50a1465f4f2a93a5e3aad4be8647be148d403a2ea72869c0a7eda82fd81409e05216c5565463bacfba792aff","ssdeep":"","tlshash":"6a31e0adfb5944aae0fba353ac55721e52bdf142cd438c5a9f6849a044c3f2cf104a30","size":1513,"data":"","first_seen":"2026-06-16T01:49:08.32499Z","last_seen":"2026-08-02T04:18:16.87229Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff8172f61819181544b3bfa80cd1d5c0","sha1":"763030bef4ab8c210f05424dab183432b5055a18","sha256":"f1fd57c608e44195c164e34f475ca74a9d6be7a13a6834d52fd8b1f8a1cfd298","sha512":"c0b4251a591a341efefe0986dc6bedb3215ff99e07f75ec9547eaaeb0108cbfa7d708625c93d8629fc5c6b5659dced4fa5c52a4d92f6acfef79d66a039e21ea0","ssdeep":"","tlshash":"37e0a23d3c3441d90b9220f480f7e2283a0a30340055d95b989ac86868f0fcebd02898","size":416,"data":"","first_seen":"2026-07-12T14:19:33.855212Z","last_seen":"2026-08-02T04:16:37.877373Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/js/script.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5637f3b08a97f31f97474de6ec0b131d","sha1":"96103a527c4adf29b32f8c944952daad61c77260","sha256":"69a97a04acc1367acef54657c6022c7061af338ad47af096d6b5b59cad208807","sha512":"01903ce35dc7b5d185501a1df19bdf9d41c90ad7d6738e84787c57c7922faed01eee96a0e03d1827785074ea48bc1ec85c0e61764e0be24ac99468e39575c18b","ssdeep":"192:20+yeNxfIk4yHXhTahTigTJDjAEPTJVPbSE9CYvLHSYuyxmhQjExHJ5H3UG1:2vyeNN1/HxTahTigTZjAQTSE9CYvLHSJ","tlshash":"f3f18582f36da9a7413730051c7e60ceaa6c1072cc8d8db7bdfd112869e452d6176f6e","size":8159,"data":"","first_seen":"2023-04-27T10:46:44Z","last_seen":"2026-08-29T08:29:16.473557Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/css/theme.css","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.207Z","timestamp":1783877863207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/css/theme.css HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: text/css\r\ncontent-length: 1798\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11752,"size_decoded":2481,"mime_type":"text/css","magic":"ASCII text","md5":"c9890fcc66f70d4a73ef8010bc9013c7","sha1":"90d362075c3a3799830868ba62e16d07a8afc5fd","sha256":"01fd5d85b4eaff9bd8fc4af90829d3b2e2cbab4643cdd200e42f5154db02d575","sha512":"81553f2a0129c783a9e56ccfa87f63e9feb82643dc36cb09fb61eec8bfc750fe5e54c881f22c09ba7a4c3f82a10dc231bee5b1f36adfb7afeb08aea51549278e","ssdeep":"192:OMIfGTD0ZxOa0bbjB3wkuYtz4iBi0i9i0hhniZi69jniJ5rfTqc0flFhlVxhBfPi:OMIfED0ZxOa0bxdtz4grElM5crfTqc0O","tlshash":"cc327842f2b53dde9127ed1879f6c940231d91a6840c9f9f3e69d3940fea2089a34db3","first_seen":"2026-06-16T01:49:07.852067Z","last_seen":"2026-08-02T04:18:16.780075Z","times_seen":25,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.html","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.227Z","timestamp":1783877863227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /unpkg.com/sweetalert%402.1.2/dist/sweetalert.min.html HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803371\u0026pdata=https%253A%252F%252Fcapital-vaults.top\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783877861","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:37:42.761Z","timestamp":1783877862761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9803371\u0026pdata=https%253A%252F%252Fcapital-vaults.top\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783877861 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-vaults.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 17:37:42 GMT\r\ncontent-length: 0\r\nlocation: https://capital-vaults.top\r\nset-cookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; Path=/; Domain=capital-vaults.top; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/tes1.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.239Z","timestamp":1783877863239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/tes1.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83095\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":83095,"size_decoded":83736,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x874, components 3","md5":"b63371729f89ce5b5fb05cc7b6551eda","sha1":"b8b57f4e597f5e5d829c3d23340b290d22c4f2ac","sha256":"2fbb403bd5af56cf95c45e1e85bc82a18c3566e052b39bdbf56d42d134524005","sha512":"75c0d7db319f35c4fdc8ad91e72c70f57ebfc21350b56dbd7ff91b5c7ba69412b46a54b5b909fffbcfc428d15bd54887cc76d8c53cef3af60ccde25874384ff5","ssdeep":"1536:/8cYKcaRjRLWl9hz98Swx1jadARsb64meB/Oc48b1MDY7E7UWoHS/Ez:wK7R9ewSwTjadARsOeB54KUEz","tlshash":"4c83024047372a2e8b5bb2abe78ab6276114d9e1b3d3f5b604c2d3f37254d913308d5a","first_seen":"2026-05-31T15:18:49.303044Z","last_seen":"2026-08-02T04:18:16.806304Z","times_seen":26,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/Quicksand-Bold.woff2","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.176Z","timestamp":1783877866176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/Quicksand-Bold.woff2 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41412\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41412,"size_decoded":42053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41412, version 1.0","md5":"29577832ce0a8882a6a84b97fdcb0e9c","sha1":"632381a803b5122ac7a80dc3d16a245c2d08adf7","sha256":"6ca127a725169d5bc7edbc97463b3053c36d3ce327fc50542d951f4a2e010865","sha512":"967f0e04fac2e1324bd34ece372591fa06b6e8a73dae65e9acb275a57eb8fc7ce4d257057736a5ae8709b7461fa92b115fdc14923ec91fffe48af561d7457c5a","ssdeep":"768:sTQss/DGO/EJKIwLcULtl74Nfl4yp7F8tGWRAogSLYHBOaYErTiv91fmQLJ/2vRE:sQbKJKncwn74N9HlFz6A/SLYHBOErc97","tlshash":"e603f19aeb40a4681b9f1d72d0670ebf310905e3664fcdc5a94d8d739e26d38b23087e","first_seen":"2023-08-18T15:52:53Z","last_seen":"2026-08-29T08:29:16.520542Z","times_seen":94,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.205Z","timestamp":1783877863205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/css/style.css HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: text/css\r\ncontent-length: 15543\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95808,"size_decoded":16227,"mime_type":"text/css","magic":"ASCII text, with very long lines (431)","md5":"3f61cb35a268029a3998d97dfef811bc","sha1":"a94770b683ba0a6b52777587d0553629fa19ca50","sha256":"540d007125336f697717ede0d191815da0fa3994fcc4534db25cb9af911281f6","sha512":"333b5cdee025524e46dd52016664f0b969343d61d485593782de17aba84502ec4498a1f948e99605249eb1b2b0eb7153e8afd75849ac08a88aab2aeb60eb92a5","ssdeep":"1536:b0ykkofXNt0kURbbG6yTRhwoodPmWC+WfVp9v1maa9vFQIQ3tDa2IHp3UGwcHXqr:yI6eGM4H","tlshash":"6893d843b320310c7177a189fad7df9063351256f60a69ffb9e2640ac28c8d815b7f6a","first_seen":"2026-07-12T14:19:33.789238Z","last_seen":"2026-08-02T04:16:37.868699Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/Quicksand-Medium.woff2","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.180Z","timestamp":1783877866180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/Quicksand-Medium.woff2 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41636\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41636,"size_decoded":42277,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41636, version 1.0","md5":"c2d39ba79bbcafce703ae1acb699f5cf","sha1":"2ec119069786df8650f58786d1321ccf63efb73d","sha256":"ecda2dc19245619ed0f6002f152862f278140d2c7039611adea6b4fee444c1cf","sha512":"893d13faba925667650a75254f53306b6c4f07ab2a3f81e0e4fe58fe2d7707cb9576593e2ea99cc863ffe7a4bbb0733828b27ad40dbb8298eaf7f471ba508504","ssdeep":"768:lnRRTiKZzUWGKvRjI9xcooUc8sJLyzXa3VSLk3jdlKI1QaRP0QQSdA:lnRRZoWGoUOtuXa3skf/TWvn","tlshash":"2b13e1a85124641f918da1b8aa805bbe1b7dfc74e8a0b7ed17c80db9407528f5d805fa","first_seen":"2023-08-18T15:52:53Z","last_seen":"2026-08-29T08:29:16.503229Z","times_seen":90,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:53.588Z","timestamp":1783877873588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:53 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k4QjDE41M5e3XPeU+K85iPSSvOAc6nRmCt2H3P//waxcfBTtFP0rnT3kgTRTjSIAKibYqQY\r\nx-77-nzt-ray: e2f75420fc4f3437f1d0536ab9bf3823\r\nx-77-cache: HIT\r\nx-77-age: 464831\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8207,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-09-14T01:06:29.046413Z","times_seen":4145,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"51.102.228.32","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:53.811Z","timestamp":1783877873811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://capital-vaults.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: roWghQEFHTth8h9eZT1dbQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 17:37:53 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: lXT5Hfw369o/mvB/81r8dlUOGTY=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":100,"connect":118,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/#","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.229Z","timestamp":1783877863229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 11159\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjVLUGZSMWRXTGtBTXBFQzBEZG93eGc9PSIsInZhbHVlIjoiR05yOVgrcEcxUnRxWGVTU3lmVFk1LzJXaTRRNWRXdUlGbG5WelEwMkszbkY0aTBVWFkydlh3MXFYeXM0SDd5ejZNNDJDdU56VU1Yb2UwaDBzQVZmUXRDZXl2SXZZbmRIUS9keUVGaXlyQTdnUkxvbk1BUHZaU0l5UGlvNlhuSlUiLCJtYWMiOiJkMGQxNzc0NDQyODYwZWZmNDcxYjU3NWMwMDE0Zjk4ZGUwMDQ0NTEwMDEzNmVkYTc2YzQ1YmM0YzljYzgyNTVkIiwidGFnIjoiIn0%3D; expires=Sun, 12-Jul-2026 19:37:46 GMT; Max-Age=7200; path=/; samesite=lax; secure\ncapital_vaults_session=eyJpdiI6ImdNcmQvRzRpUzVTNG9BdHBqY2dpUGc9PSIsInZhbHVlIjoiMXJQc0oyZFFVVmsyU2NLdjY5bWJJeXZIZlVCektxbW1PbEtVWE8zRzRabVlWdXZ2Z2dBMCtjWW5rWk5zSVNtbm5zTlVZdWRXbW42NU5tVFZhV2pPN3Bpa3dGMmFYRTZZUnJrRGVtaVdpM3JSM2M4bzYvcnpIcWtMM29TNG9JZUciLCJtYWMiOiIzNTgyNTgwMzAxZWFmZmE5MTA2Y2U0ZGU5MWVjN2E1M2QxNDJjZTAwNDdiZWQ2Y2JhZTIzMzI3ZDlhY2I2ZGM2IiwidGFnIjoiIn0%3D; expires=Sun, 12-Jul-2026 19:37:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/images/direction-dots-b.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.145Z","timestamp":1783877866145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/images/direction-dots-b.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3090\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3090,"size_decoded":3729,"mime_type":"image/png","magic":"PNG image data, 313 x 31, 8-bit/color RGBA, non-interlaced","md5":"86b707e4189745fb972b488f0f473ebb","sha1":"027d876e45e9d67a37f0bfe8ec7863e7487cf0db","sha256":"dd788d21b9d32b93a15036fa2365f4f04c966485beafb22f8b8130a1e4614a62","sha512":"dd3a933ca51340e7b49f125d3e93854ea25c02e93bc40dd62ebf1b2bacb079f6a9ad18fe8c79c7d08e255737ad8aedc5d9b5ad58b936d7f55e4808d05663151a","ssdeep":"","tlshash":"4e515c0df906fc01a24fcd060dee84239da68f8186b5fa44e3d385622dd12f98c2a4cb","first_seen":"2024-12-14T20:13:44.78291Z","last_seen":"2026-08-02T04:18:16.631298Z","times_seen":32,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/in-wave-1.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.425Z","timestamp":1783877866425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/in-wave-1.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 21168\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21168,"size_decoded":21808,"mime_type":"image/png","magic":"PNG image data, 1920 x 600, 2-bit colormap, non-interlaced","md5":"4d340e4cc3c13ab5287a9438e271aebf","sha1":"f5bb352c480ab9a9aded701dfee2abb684ed0f07","sha256":"133ea6ee337c75cd91e8850ec8559402f17de81bcc7cac99be2f2261c9b5042d","sha512":"4d5420fbef36cf421749789c35a3e7cfa910371beed997baa7f424582788c0574c0be2d6b185c27fe61e853d5ec4f8693d72235c5c0ea497aeef0c7f7a643e04","ssdeep":"384:TI/DmPg+DKuE+6HzoL8aMgurANfBOij0H8WD32OpTL9We+5y3cSzT4p8:eXHP+izoL85ANfBH0xjr56c4p8","tlshash":"c992c14bae74b87fe66f273317f8ab1b0897b5c81143b35be7866267018042c75ae750","first_seen":"2024-08-19T19:54:18.570226Z","last_seen":"2026-09-18T09:55:20.277937Z","times_seen":80,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:37:42.792Z","timestamp":1783877862792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 11159\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; expires=Sun, 12-Jul-2026 19:37:43 GMT; Max-Age=7200; path=/; samesite=lax; secure\ncapital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D; expires=Sun, 12-Jul-2026 19:37:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49521,"size_decoded":12681,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (480)","md5":"5c53f1030485e8301f5849fc5a33b76c","sha1":"53c29fe8654893721382707885d4e228f76f5788","sha256":"da33c85a0d44a181de3a41849fdba04b486a0c366e084304ef2a02161c12e5fe","sha512":"9a191fd0adbe37dbdc37c05506104048004304eafb9cbaad012f8b6289122ee8fda44288a558b0326f8cb8dde6da63ae762a1f4213fc436a57af28842d248474","ssdeep":"768:qiF7d+Bi2BFR5KIWlR7mejecPe2ewxeHoeA36ZECx:qih8BzvrKIWTmejeCe2eqeHoeAqx","tlshash":"a223a33253fc1937004202c275202b4e6b979d37e61b45a6b2bf4a842fdbdc6ec1352e","first_seen":"2026-07-12T14:19:33.821327Z","last_seen":"2026-08-02T04:16:37.841313Z","times_seen":6,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/3.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.233Z","timestamp":1783877863233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/3.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44590\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44590,"size_decoded":45231,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 696x391, components 3","md5":"39096c7948be504f58d52a1dc300006d","sha1":"b46269c82f97da38a259a631935807d9eb8681ac","sha256":"92e8bad0c5dba00dd44c571c1101346981637c59f2b7dffcd832ccf2be5a068b","sha512":"0d9f4d1e0b2eff6bc9ec13c9ff924a36586f37e364fdcc73f1987d4ab0bea83b3ba10374a36da82115f10ffd0fad4b5aca1a5ebf079c864b115b8fad29a0a733","ssdeep":"768:/86OrMxkLZGtr+jKO0+2v72L0E3N3hQPv8nf0fA8uoh9kBhL8HqSG+FYrNbB65Gw:/86OMQZGRKB2vbuxQPvcfmC4I4KS/er6","tlshash":"a913018a97f3a14dec7e43b58882f35e3566c3b08d7ca85467b0812d53f48a949c7a7c","first_seen":"2026-06-16T01:49:07.918812Z","last_seen":"2026-08-02T04:18:16.775604Z","times_seen":25,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/tes2.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.241Z","timestamp":1783877863241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/tes2.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44077\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44077,"size_decoded":44718,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 719x866, components 3","md5":"670eb6d6e96c7d3d31f530b13e332b22","sha1":"f757e07117eef1502b6f6e6ed434519dc703a7c3","sha256":"1dd4d283c6dddfccf31e144e8474a08d3dbf8cc36fa427ed8eb28d8a894bf02a","sha512":"318ea5f6fdf8317ded79e1f0ba40042db22c01c8fa615a174cb3ca6b03575b291b77aa623d982eea4864c90e34d13191489587ae17e3c0fd5e45db1b8d7ec110","ssdeep":"768:/8I28cmluX8V/M3Z4K8yMV/ooW/jxCIJSjvLS3x2ufVhVO+KBapAdFiTrNJDkIcQ:/8I9BuXCM3Z4dyUY1CIJSjQx2mH4+1yg","tlshash":"5913f1bee32179c1f7241a33c6c5de86ab66c70e0f4421bf9ad6b41da16d360ef40264","first_seen":"2026-05-31T15:18:49.255962Z","last_seen":"2026-08-02T04:18:16.706932Z","times_seen":26,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/tes4.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.243Z","timestamp":1783877863243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/tes4.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53383\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53383,"size_decoded":54024,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x871, components 3","md5":"d27b8ecf863925fae9dbf2295932864c","sha1":"ab9c212ee77090bb2d4487a1dc9d3f9fb6542547","sha256":"a85e14131d18ee3d8a49459e854b9717148708a1433ac6212b1d22c22921737c","sha512":"126b05f23ed1e3758252f4b8c8082e0535a0c3a125f8a1751194f6a932d2df3651b5b13e2a027d8da4f543ffb1cb1b26475fe1c352568c75303ff2b533a8bb32","ssdeep":"1536:/8DUUpSS4/WNXGwKgmtSIpJN0Q7y9G8580wCf:iUUpSN/WhzESkJaMyc86rCf","tlshash":"c63302857a2ed08ac86c1d76f4cf3c07aea3380c54cba755a9b019bc8d75393c3664e9","first_seen":"2026-05-31T15:18:49.322688Z","last_seen":"2026-08-02T04:18:16.700348Z","times_seen":26,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.211Z","timestamp":1783877863211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-ticker-tape.js HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/uploads/logo/logo.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.231Z","timestamp":1783877863231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/uploads/logo/logo.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 368247\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":368247,"size_decoded":368888,"mime_type":"image/png","magic":"PNG image data, 3264 x 753, 8-bit/color RGBA, non-interlaced","md5":"00843840d0790eafb2169531d76f5608","sha1":"f79b20bd7edbde34baa87fbd5ed45e28b0b66a05","sha256":"f12beee9ed7bbbe2ac87a5d7d6f1e14483969c6c58f9ced9fc5c29094258bae1","sha512":"a3f97268e0289b8e3b3c41c433576c8b0d9a7d4b5cfc13f41a1d9a01001e90f4cda35f2b0a4aa9905efaba5dafea0b8bc5a1138ba3fa54a5d31f4afc04896c5e","ssdeep":"6144:sz47yGCl4zO4KzNy2VcniK/RDqeDm9qbHY8RN5bIOwxlDpCo6GOq9B0TNT:sEGGCCzO4EhVcn5/R2eMqbB/IO4lD4o6","tlshash":"0b74128498bfc081ceaf99701c6bbf3321ab656550ea6d31ecf0217ce578e3ca9595c1","first_seen":"2026-07-12T14:19:33.809651Z","last_seen":"2026-08-02T04:16:37.861947Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/images/footer-bg.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.249Z","timestamp":1783877863249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/images/footer-bg.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":931,"size_decoded":1012,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6f581b1ccea7c69a07cb28ea6b8a56a4","sha1":"e482e08e3d6d72abecad3f89ed02f16389baa44d","sha256":"397332576e1f3109f6dfdb07b4f515324bb1435a81c81ffad6b86fed3bcd6736","sha512":"2edece7c04f1e61313db9bab4f89dd31a69744a41d01a98c4a0ff343ed41a3e1959bcaeb351cb46a88c308622d8f5df4f249650452d74b08bd66785990214900","ssdeep":"","tlshash":"0111636f04465abf120085627416323dd0efaf6e6e832840e4e32dabbac86c0c47d49d","first_seen":"2026-07-12T14:19:33.802054Z","last_seen":"2026-08-02T04:16:37.86443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/images/loading.gif","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.148Z","timestamp":1783877866148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/images/loading.gif HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 25480\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":25480,"size_decoded":26120,"mime_type":"image/gif","magic":"GIF image data, version 89a, 76 x 76","md5":"5001252beb413d333bc0691b89f8f294","sha1":"b0dc5f39587cb34242d63f256d6bc9b4e428ac71","sha256":"b576eaa6d120b21f25fe008de7b6e3e580f52823b31e8c69dd55480114d18ee8","sha512":"9f62562eb98376e6bf9c236d6b96b68c1e16a154c829c1dcab6d79b3588d16352d893bf53c60683ccc94ee2c38913deb70179df54d32e655711d8d52b6e53c60","ssdeep":"384:5XAA+Kg5nnZ7BPY0/F3Z/kEnfmpzTWOz+zT4FEpcLV4KlOnYiV4g0Znuwufixvtl:5wcg5vYW3ZselClK4BZubfcwU","tlshash":"0db24df3d1b8c513ede6793d4a108fa28d585c6804b35e4ef9253d8826372851fad73a","first_seen":"2023-10-31T01:37:43Z","last_seen":"2026-08-04T06:18:03.81927Z","times_seen":76,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/uploads/logo/favicon.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.715Z","timestamp":1783877866715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/uploads/logo/favicon.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IjVLUGZSMWRXTGtBTXBFQzBEZG93eGc9PSIsInZhbHVlIjoiR05yOVgrcEcxUnRxWGVTU3lmVFk1LzJXaTRRNWRXdUlGbG5WelEwMkszbkY0aTBVWFkydlh3MXFYeXM0SDd5ejZNNDJDdU56VU1Yb2UwaDBzQVZmUXRDZXl2SXZZbmRIUS9keUVGaXlyQTdnUkxvbk1BUHZaU0l5UGlvNlhuSlUiLCJtYWMiOiJkMGQxNzc0NDQyODYwZWZmNDcxYjU3NWMwMDE0Zjk4ZGUwMDQ0NTEwMDEzNmVkYTc2YzQ1YmM0YzljYzgyNTVkIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImdNcmQvRzRpUzVTNG9BdHBqY2dpUGc9PSIsInZhbHVlIjoiMXJQc0oyZFFVVmsyU2NLdjY5bWJJeXZIZlVCektxbW1PbEtVWE8zRzRabVlWdXZ2Z2dBMCtjWW5rWk5zSVNtbm5zTlVZdWRXbW42NU5tVFZhV2pPN3Bpa3dGMmFYRTZZUnJrRGVtaVdpM3JSM2M4bzYvcnpIcWtMM29TNG9JZUciLCJtYWMiOiIzNTgyNTgwMzAxZWFmZmE5MTA2Y2U0ZGU5MWVjN2E1M2QxNDJjZTAwNDdiZWQ2Y2JhZTIzMzI3ZDlhY2I2ZGM2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 344203\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":344203,"size_decoded":344844,"mime_type":"image/png","magic":"PNG image data, 1775 x 1794, 8-bit/color RGBA, non-interlaced","md5":"55efec31b23f924e957c72c745a674a1","sha1":"8e7019f9b1696c49b2830b21476a9650d9a1c71b","sha256":"938b183d76176016d7c03747126bdf9141ea50a7b5954462b9dc034bba67a4e2","sha512":"c702a7db60c0c2a261f782b77856c34cb67214b9a08779e7b6f7064adef5bc3a8d1f81071c0451062a51b60b365debdba859a4cefac4bb1094a2cedad3abc439","ssdeep":"6144:HN0XLEQnlGOClWHBJsL7LL6OSA46/Add3erpxWSOqOJfW3vzLlfh:eLzpgGUak4xdderp0Jqd3lfh","tlshash":"9274220250f7d561ce4fe83a3a801e353eb7613784f8b536896917dcf46ed690a92bc2","first_seen":"2026-07-12T14:19:33.799478Z","last_seen":"2026-08-02T04:16:37.85609Z","times_seen":8,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/1.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.234Z","timestamp":1783877863234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/1.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94732\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":94732,"size_decoded":95373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1000x600, components 3","md5":"287b0f6f5f2bdd99be8946babc96bec6","sha1":"c4f407d8f1a514440fcc82b0db5e53954fb0b769","sha256":"b551d45edfe129ac0efb802fd0c71f381cc2e9d87d58a138c5f24f3fa5b2484a","sha512":"3e16984ffc2b8f07ebf78d8e713a8507866ee2c0975794fd52ef3300dd18a3aab5ff6052f2c0bbb48d520ee0ee62417bf6f69b0ccb679b29d5e3de72486e850d","ssdeep":"1536:HP3yrlvhmdoV4sjOttjULPEGjaeG/O5/57/5HNpoVKWvvHPJIb/l2rrRc5RaL4SK:klvlZjOttRGjTG/O5/VphTb8dckAKTnK","tlshash":"4d9301026ac203ba81989c37932cb2f55e7e39f9e28757a074648fc9e16f7c497250dc","first_seen":"2026-06-16T01:49:08.216299Z","last_seen":"2026-08-02T04:18:16.834267Z","times_seen":25,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:50.245Z","timestamp":1783877870245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nContent-Type: text/plain\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a4cb803-891\"\r\nexpires: Tue, 07 Jul 2026 08:35:15 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k4UfY9zggjcEskWTh404LJvxklVYljDFBE8KitB/ChxGTzU376DPfT6OpLsZJE2gXcDbzk8\r\nx-77-nzt-ray: e2f75420fc4f3437f1d0536a8e8ffa20\r\nx-77-cache: HIT\r\nx-77-age: 40\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"88bd6816d4679ef7a63e1e6b61490804","sha1":"a592c82f8688d81c4ff12ddda0f42d842dbcf079","sha256":"1147d96bffe9abe8aa663c63cca281edbff049e2211f810da089a1dd90051df8","sha512":"e583bebb86335657d7cca5065967a4e281280f0b4ab1fe0457de1dee47f12f84922daf5fe938c39bfb8f03e086d706f2b0fd1d86a6e79c4cce053f0943dcb762","ssdeep":"","tlshash":"d9414593c0b80e5317cc262bb89545515d5083c7e88a3d0d366d9a7f2f4cea920e6b7e","first_seen":"2026-07-07T11:50:17.724469Z","last_seen":"2026-07-27T07:27:47.909394Z","times_seen":1802,"resource_available":false,"data":null}},"time_used":3313,"timings":{"blocked":-1,"dns":36,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-t6WxLABA.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:53.584Z","timestamp":1783877873584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-t6WxLABA.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-3f99\"\r\nexpires: Wed, 07 Jul 2027 08:30:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: kxZTgyGqIJYTmOOiiTwesbQW2zetk4EXjsR6FDnrfCpoQg/JEWOZiGeg5rQ4yVi/zUbyS0g\r\nx-77-nzt-ray: e2f75420fc4f3437f1d0536a99aefa22\r\nx-77-cache: HIT\r\nx-77-age: 464835\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16281,"size_decoded":6836,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (15873)","md5":"9253d4d9d6ea32e484f0be9a0320a7a7","sha1":"762fb8fdf15626507c1c26a66aa7fe399d39e803","sha256":"1fb0b8e426f707feea50785bc24016fe14a76fb763d5eca3bc9b1d265bf77fa2","sha512":"5a1592fc87a402c636315def22f3c60dd7eeda34701b08005a192ae060acbe7ed8ae8aa709cc1664c3d9489c641e1ada60e79c66f13073ab61e6ba5bd86f524d","ssdeep":"384:9rgi5RFMkSjJOE/0BW2rkZZ795P6zrnBOVmPCRkXQbpaIF2K:9EizlSjJOEiWYoR5P6nnBOVmycQbpaId","tlshash":"0272d7742700783f711f489e16ade546b232c29dd693892d9b6fec0976c5cc0a8b37b9","first_seen":"2026-07-07T11:50:17.711459Z","last_seen":"2026-07-27T07:27:47.896741Z","times_seen":1890,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-CgMCAfor.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:53.585Z","timestamp":1783877873585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-CgMCAfor.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-42705\"\r\nexpires: Wed, 07 Jul 2027 08:30:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k8OM2ylkMMsjjv0Fo8/qlmNQ7eWkYHYdTdQes9Oe2gOvL6f/aTGo8dgLLXFWZj/wx/cdkBA\r\nx-77-nzt-ray: e2f75420fc4f3437f1d0536a1f070f23\r\nx-77-cache: HIT\r\nx-77-age: 464835\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":272133,"size_decoded":92591,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"06c5668b0e6d3383e096c45abdbedf9d","sha1":"8d64309e8ec50da59f799336c11685ca7fd15ecc","sha256":"2724b50edb69a23cc951a77f775727b960c857d18d58cfa9a47fe5c094d9b99a","sha512":"c4a86d25f4e86be36db19539b4e3efc70500a48b9664349043d76a1451f8536c8bed7fe22f8ca790fb3ac7e26fa7efbfc37e0c927687966dc08a02442e15f85c","ssdeep":"6144:mLjnOEIL18ad2jJKaQo+tRkYcuBaay+moJG:iOEIZRd29lqj4n+moY","tlshash":"53443ad53294b035439b51e6906f1106f33e5c58580d812cf269ede678baec8a2f7fb8","first_seen":"2026-07-07T11:50:17.748529Z","last_seen":"2026-07-27T07:27:47.884385Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/use.fontawesome.com/releases/v5.7.2/css/all.html","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.209Z","timestamp":1783877863209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /use.fontawesome.com/releases/v5.7.2/css/all.html HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/code.jquery.com/jquery-3.5.1.min.html","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.226Z","timestamp":1783877863226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /code.jquery.com/jquery-3.5.1.min.html HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/68a475dc9a04c48cf0111cfdbff8684550f5f9b3.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"52.58.184.107","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:50.129Z","timestamp":1783877870129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/68a475dc9a04c48cf0111cfdbff8684550f5f9b3.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nContent-Type: text/plain\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"51c-7bs60On8Ut+a3p3COOFUa9OjqDo\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1308,"size_decoded":932,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5393b12c2941872ac6be705bc2ab9e4","sha1":"edbb3ad0e9fc52df9ade9dc238e1546bd3a3a83a","sha256":"d31d2c5846a7b921b28a691010e06d021bb5eabc7b94ec0b4f47571de9432521","sha512":"13d63972a6c43bf2cfec9b05a0529921b984522f0eb42c626831dcf3fd7bc7c9a2202893a8894957994d190c5bc715258a504d34dcc1a7446870248b0873c7f5","ssdeep":"","tlshash":"5221686d895812fd9245c7d6c5087f075ebcdcb361003e7dea0d4a1d60eb3e6213546b","first_seen":"2026-07-12T14:19:33.813024Z","last_seen":"2026-08-02T04:16:37.872108Z","times_seen":6,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":4,"connect":21,"send":0,"wait":26,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/5.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.235Z","timestamp":1783877863235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/5.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60874\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60874,"size_decoded":61515,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x538, components 3","md5":"0f03d3b991818046417bfc2e83f72c33","sha1":"a2c89798358c869189144875f4e21a44f83fa641","sha256":"ae499515fe4f7e1ff64b86645fc202a4012f341eedfcbb17c37ce6ddeaeeea40","sha512":"c67f0aeb26cccb8d27ccbedbd9f1b4cf4ea14f167a7fa56a8de6c13b80012a63b92638fd35eb8f2166b6b5815c834811b34c5a1abb2cc6c017c68ffdd97f4bab","ssdeep":"1536:/8vr4JuuzvRfhRInuCCJYpPzCD+hm+R5wPg30:e4J5PSuCCJYpPGalRqn","tlshash":"41530240730a4951907334bfee87e6e9ca700ea8b15f93059d58b625c37a432af606ec","first_seen":"2026-06-16T01:49:08.266615Z","last_seen":"2026-08-02T04:18:16.724068Z","times_seen":21,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/images/box-icon-j.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.246Z","timestamp":1783877863246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/images/box-icon-j.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":931,"size_decoded":1012,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6f581b1ccea7c69a07cb28ea6b8a56a4","sha1":"e482e08e3d6d72abecad3f89ed02f16389baa44d","sha256":"397332576e1f3109f6dfdb07b4f515324bb1435a81c81ffad6b86fed3bcd6736","sha512":"2edece7c04f1e61313db9bab4f89dd31a69744a41d01a98c4a0ff343ed41a3e1959bcaeb351cb46a88c308622d8f5df4f249650452d74b08bd66785990214900","ssdeep":"","tlshash":"0111636f04465abf120085627416323dd0efaf6e6e832840e4e32dabbac86c0c47d49d","first_seen":"2026-07-12T14:19:33.802054Z","last_seen":"2026-08-02T04:16:37.86443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.611Z","timestamp":1783877866611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:50 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k5bgyxCrq1hW/yqx6kkAQPoGoEL+iPWTZA5MjBwUqlRiIoSXfeZE/pW6N9hXjfZf/yGZ0e0\r\nx-77-nzt-ray: e2f75420154bdfe0eed0536a0a895000\r\nx-77-cache: HIT\r\nx-77-age: 18\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-21T13:02:20.446331Z","times_seen":9549,"resource_available":true,"data":null}},"time_used":3398,"timings":{"blocked":0,"dns":102,"connect":8,"send":0,"wait":10,"receive":0,"ssl":3278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/04.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.136Z","timestamp":1783877866136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/04.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 194206\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":194206,"size_decoded":194848,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"a145a93097819c7afbe687f7d3c1e561","sha1":"af34590122389c79cf814d8a94b04dd72b362d36","sha256":"65c213406c429d87ded2a6c3d908c8b1430cfc0529b681297c2e797a4f146011","sha512":"66a1b0fbdf6285b016160a89dd71a19b1e8ec88b4aea47ae2a7f75fccf0e408891d3eedf01807b3c85f4047f0789d9892b7d9870aa419fc57eb40086d0cea874","ssdeep":"3072:CNB4qVrzfXCs3pLurOnVHZ4Ln0+Ojf6Dmy31YKIobGqwfvDIDm5izi+Dg/GEOrH:ydph5f4L9Oz6ay3WKIobGffvk3jD","tlshash":"621412279b19b303d55839f108f30f1cef261db854d28a3996d909a69853a0cbe7fc9d","first_seen":"2025-03-01T20:43:18.852049Z","last_seen":"2026-08-02T04:18:16.787591Z","times_seen":30,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/01.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.140Z","timestamp":1783877866140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/01.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 175031\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":175031,"size_decoded":175673,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1200, components 3","md5":"20ad1ee3a6e77b9754626a8214fe011a","sha1":"3516d55e628666627ea05e9e13bb6ded28940ece","sha256":"d555b339277e6428bda3fc81a0c7437a8c3a7e0943fcdf74b03ebd6ba7aad47b","sha512":"7697a55bf487948aae0e81d5459b2e58d084dec4156fb212fb561aec71529f2f3068207a0e3230285f2cd60f45f436d735662c14c680985311c14dddfcc4c60b","ssdeep":"3072:k9CTM0shgpcfPTHHwrc9r4ve1YtpqYrt8dZC7jAZgFXr2RxgrV+4RquKvhbFz37g:4ymg4rHacZ4W1Ytpnp8dZC7I+XyRxgrT","tlshash":"4904128f4ebee6854e0ec3b119f12942139b9679b149445b3c21473876928eef12f7ca","first_seen":"2024-08-20T14:18:09.988639Z","last_seen":"2026-08-02T04:18:16.783826Z","times_seen":26,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/OpenSans-Regular.woff2","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.178Z","timestamp":1783877866178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/OpenSans-Regular.woff2 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50208\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":50208,"size_decoded":50849,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50208, version 1.0","md5":"5885cdcbf91568407721e354f8d01414","sha1":"26284307cd7e3f0cd67b47a54c46e9766b6480be","sha256":"e56451053236d0609126126105fb30ab407aa253673309b791c9e2cb58b274d3","sha512":"c1156bbc2a0f461cf681e9e483f54e441a878ae2ee482fdab2b720b68cdcf4c3f84a1f8d1e4b5e1ce008f6c73b3ae19b6933f70020c581a81fca286a54ec6552","ssdeep":"1536:Tj3M0o2yFBjRgtLJTHa5SmHpCWoTTTZqgMSO:Tj3M0oBjRaVkpCWoHgXZ","tlshash":"363302f84ae69fd385607158ac40ddcc5a8d48f74cca388fb43b42bd195b15c7214ab3","first_seen":"2023-08-18T15:52:53Z","last_seen":"2026-08-10T08:00:01.06011Z","times_seen":101,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/uploads/logo/favicon.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.718Z","timestamp":1783877866718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/uploads/logo/favicon.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IjVLUGZSMWRXTGtBTXBFQzBEZG93eGc9PSIsInZhbHVlIjoiR05yOVgrcEcxUnRxWGVTU3lmVFk1LzJXaTRRNWRXdUlGbG5WelEwMkszbkY0aTBVWFkydlh3MXFYeXM0SDd5ejZNNDJDdU56VU1Yb2UwaDBzQVZmUXRDZXl2SXZZbmRIUS9keUVGaXlyQTdnUkxvbk1BUHZaU0l5UGlvNlhuSlUiLCJtYWMiOiJkMGQxNzc0NDQyODYwZWZmNDcxYjU3NWMwMDE0Zjk4ZGUwMDQ0NTEwMDEzNmVkYTc2YzQ1YmM0YzljYzgyNTVkIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImdNcmQvRzRpUzVTNG9BdHBqY2dpUGc9PSIsInZhbHVlIjoiMXJQc0oyZFFVVmsyU2NLdjY5bWJJeXZIZlVCektxbW1PbEtVWE8zRzRabVlWdXZ2Z2dBMCtjWW5rWk5zSVNtbm5zTlVZdWRXbW42NU5tVFZhV2pPN3Bpa3dGMmFYRTZZUnJrRGVtaVdpM3JSM2M4bzYvcnpIcWtMM29TNG9JZUciLCJtYWMiOiIzNTgyNTgwMzAxZWFmZmE5MTA2Y2U0ZGU5MWVjN2E1M2QxNDJjZTAwNDdiZWQ2Y2JhZTIzMzI3ZDlhY2I2ZGM2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 344203\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":344203,"size_decoded":344844,"mime_type":"image/png","magic":"PNG image data, 1775 x 1794, 8-bit/color RGBA, non-interlaced","md5":"55efec31b23f924e957c72c745a674a1","sha1":"8e7019f9b1696c49b2830b21476a9650d9a1c71b","sha256":"938b183d76176016d7c03747126bdf9141ea50a7b5954462b9dc034bba67a4e2","sha512":"c702a7db60c0c2a261f782b77856c34cb67214b9a08779e7b6f7064adef5bc3a8d1f81071c0451062a51b60b365debdba859a4cefac4bb1094a2cedad3abc439","ssdeep":"6144:HN0XLEQnlGOClWHBJsL7LL6OSA46/Add3erpxWSOqOJfW3vzLlfh:eLzpgGUak4xdderp0Jqd3lfh","tlshash":"9274220250f7d561ce4fe83a3a801e353eb7613784f8b536896917dcf46ed690a92bc2","first_seen":"2026-07-12T14:19:33.799478Z","last_seen":"2026-08-02T04:16:37.85609Z","times_seen":8,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/uploads/logo/admin-logo.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.232Z","timestamp":1783877863232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/uploads/logo/admin-logo.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 158147\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":158147,"size_decoded":158788,"mime_type":"image/png","magic":"PNG image data, 2560 x 595, 8-bit/color RGBA, non-interlaced","md5":"e27546207c555d35c85ed981175354e5","sha1":"b58e775ae85baa8f05bdb5df7407a1edc4e855d5","sha256":"1435af45f043aa92ab78c2f102e9f97a1a7b5c61867cd7363855ef5de1241dfb","sha512":"b58430ba887fd37f812dcd605f36beab2f6eee6329fc97103f8a13bed02c1257368578b1db96c21a31559231384215125a069fc2455b0e462e54835d71f6ff34","ssdeep":"3072:a8uA74rNwDvCpe5jP8k/XYs6AUMzb4oda4DVgzNcO1yGzwzjSWWboF:vcNwjCped3Y7AjztdaQS117zeaoF","tlshash":"a8f30252189bd477eecf297c1b3d44cd00ba31b2fa248ef8a579548de0946b843367d6","first_seen":"2026-07-12T14:19:33.823889Z","last_seen":"2026-08-02T04:16:37.867903Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/css/vendor.bundle.css","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.203Z","timestamp":1783877863203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/css/vendor.bundle.css HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: text/css\r\ncontent-length: 31390\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":188528,"size_decoded":32074,"mime_type":"text/css","magic":"ASCII text, with very long lines (65404), with CRLF line terminators","md5":"c64e2943f8dd1e4be893cca4c900ca29","sha1":"5f7741efbf6572a48c5a8092fac5443ce5e85154","sha256":"e974fe3ce621ea421ac296b2e14f5d34dfa0f086f457f8388ac9bdb677364b8c","sha512":"14668829994ea747936320632764a6abb6ad30818fb14b917897aa8a3f21550652c7e9e93b2233c543e2c8003ca8ecaf81c8914dec24ccc9360e9095f21ebe5e","ssdeep":"3072:bO+vU1wFiS22l7pAm4WE30sBCs3rMhhu8:q+vUzS224m4WE30sBCs3rMhhu8","tlshash":"b60496b4e50821da7333c15bb7c0fb592269f266d4520db7f21f298c4ec568912e3f2a","first_seen":"2026-07-12T14:19:33.804447Z","last_seen":"2026-08-02T04:16:37.867108Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/s3.tradingview.com/external-embedding/embed-widget-screener.html","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.214Z","timestamp":1783877863214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-screener.html HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/tes3.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.242Z","timestamp":1783877863242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/tes3.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78222\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":78222,"size_decoded":78863,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x866, components 3","md5":"3ffb560dade0c8a05224ed321eb67e85","sha1":"b5b68a8c6f7c8b5508d33e3f19e144dc64919833","sha256":"1a05259d7294294c1f78fb33db4e6031bfe63665d34a26316e075009c5d8ecfa","sha512":"8d28ab171bac4843b67b33552402adc84970afcf332aae8747867ac3bd04a568360e5837d2739434eac2a3d97889d2d35ec2583e69d0c5dcc95f34ef50d6b48a","ssdeep":"1536:/8cE60gx2wtMILB/AI3WdKqT04xmNlUDtOrY0nH5HK:tx2wt5md1smxOzZq","tlshash":"8f7312d06b57816ff13d63914e790eb2235096f974b162ebcc8e34e91e6da7c604238d","first_seen":"2026-05-31T15:18:49.284046Z","last_seen":"2026-08-02T04:18:16.838231Z","times_seen":26,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/OpenSans-Light.woff2","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.173Z","timestamp":1783877866173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/OpenSans-Light.woff2 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51464\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":51464,"size_decoded":52105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51464, version 1.0","md5":"ffaae0e182f3d623f491ebd81832876f","sha1":"fffcae008b38af3d6053e83ac016b43eaab7752a","sha256":"d968e6eda7694f6f7c6ea8ca16848d3d7be3eb9ec87665060dbb20122073497d","sha512":"f0873a85bb9e187db750af3332b1c2fb97b8846a9fc83d51d5b78aba8dbb6e106ea058c734a9dda6ac491383247e33819325a61017647c6dd713b69acc927718","ssdeep":"1536:ODTlboZa77ocx6gvSWlqX4XoeGH/CZuE3k6i:ODTlboZMXPSzX/tou7r","tlshash":"0433025bbca96dab80a799d1026750f6f51c2b098180333ebf0969472c179ddaf68333","first_seen":"2023-08-18T15:52:53Z","last_seen":"2026-08-29T08:29:16.518324Z","times_seen":104,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:53.713Z","timestamp":1783877873713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nOrigin: https://capital-vaults.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c4b9b8d0c31c1dd2975ba8f40325cc536835e186\r\nx-77-nzt: k6a1XX+AmRWxLoTH7RBR0XyTnYwD7eKI4pWXUb2vDgzFzC7oO3XImjtW7AHqJMu+ZOAMsEI\r\nx-77-nzt-ray: e2f75420465c8990f1d0536a2708752e\r\nx-77-cache: HIT\r\nx-77-age: 591\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":3346,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-07-27T13:21:25.866734Z","times_seen":5254,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":34,"connect":9,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/js/jquery.bundle.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.219Z","timestamp":1783877863219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/js/jquery.bundle.js HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 72751\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":239012,"size_decoded":73449,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"7cc346b8332f1665a9cbe2cf624887af","sha1":"ff683279745ed35fdabf5f0ee0b9c3b1d7c75516","sha256":"cfde097034cb3fec4b0d408729176ada7c403933b5632fdabd40f200fc55ba9f","sha512":"e70bd659e91c64f83bd0a50da377a70ee0ae6c6568fd55700e55840aa672db732abe86e81bef724101a81e11a9c8d9a8627f3af740558268e43a0665fbd0d717","ssdeep":"3072:y4J+03jL5TCOauTwDhFdnCVQNLa98HrjY0GFvZwlQocT5frjt:40zEOQR+iLa98HrjQAlrcT5frR","tlshash":"98341a89b3a1306287ab70f4516f010bb13668adf409887cb569d8e57db8d8d607bf7c","first_seen":"2023-04-27T10:46:44Z","last_seen":"2026-08-02T04:18:16.766006Z","times_seen":40,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/images/box-icon-k.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.248Z","timestamp":1783877863248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/images/box-icon-k.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":931,"size_decoded":1012,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6f581b1ccea7c69a07cb28ea6b8a56a4","sha1":"e482e08e3d6d72abecad3f89ed02f16389baa44d","sha256":"397332576e1f3109f6dfdb07b4f515324bb1435a81c81ffad6b86fed3bcd6736","sha512":"2edece7c04f1e61313db9bab4f89dd31a69744a41d01a98c4a0ff343ed41a3e1959bcaeb351cb46a88c308622d8f5df4f249650452d74b08bd66785990214900","ssdeep":"","tlshash":"0111636f04465abf120085627416323dd0efaf6e6e832840e4e32dabbac86c0c47d49d","first_seen":"2026-07-12T14:19:33.802054Z","last_seen":"2026-08-02T04:16:37.86443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/Pe-icon-7-strokebb1dbb1d.woff?d7yf1v","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.182Z","timestamp":1783877866182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/Pe-icon-7-strokebb1dbb1d.woff?d7yf1v HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/vendor.bundle.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff\r\ncontent-length: 58556\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":58556,"size_decoded":59196,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 58556, version 1.0","md5":"b38ef310874bdd008ac14ef3db939032","sha1":"7e544bb11b7655998db6f324c612f7ffbf0ab66e","sha256":"6fb4217048f333e23e0fd0ba2ab05e05fd7500f86a5a80a7cf04a2f94b257bec","sha512":"2cc9509bdfd9043009ed626a7d0c0d7f0ed1486690b02a482cbe859a0d851ba89843933da62e79eb5c472c55b9f33f2535909d795341e3c9d2b1277bdbc0bc50","ssdeep":"768:DOdt4kAa4qfoTLYTziyxHOtDN3gaP2iol8fpMzFt/L4gv1rn+ZapZzfJLY0uYQ:DO0LYfiV3mflGpMP3oMptJLY0u","tlshash":"36430903270bef0bd013b9f7994461738e93e1116b3396972c8a5d184b196b58e2cbbf","first_seen":"2023-04-07T03:24:12Z","last_seen":"2026-09-21T10:50:54.48579Z","times_seen":7905,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.184Z","timestamp":1783877866184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/fontawesome-webfont3e6e3e6e.woff2?v=4.7.0 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/vendor.bundle.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":77801,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-21T22:45:09.845808Z","times_seen":543271,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:37:41.167Z","timestamp":1783877861167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 17:37:41 GMT\r\ncontent-length: 11971\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11971,"size_decoded":12216,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4878)","md5":"22760783742dca38b5343606f6b7c3c3","sha1":"bb9208920bd6ffcd3a55a61279ec27fabbd0b9cb","sha256":"a43582e3222de640bf4b79bcb49ed89516e27fd70d76fbb776f28dd255773d5b","sha512":"6edbb82e86643d9ac2436ab8c6d2e6c36845559fe2a67ee4e70f99e61216fd5521e8a2e1eea4668e94cf2efd425cd59be3bfae5ad729d66b2b4785eaca946cfc","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxzyjDkJe4sM0t50nAqMsDKLN3hwM:sXX+/DV7k/35XsBt+nABLN3hP","tlshash":"f432f74daea072b0f21703dd3bef295d1234a1c3640cc488f54d6ee0af4e68d4a56ba9","first_seen":"2026-07-12T17:38:27.823768Z","last_seen":"2026-07-12T17:38:27.823768Z","times_seen":1,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":84,"connect":21,"send":0,"wait":43,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/testimonial-bg.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.237Z","timestamp":1783877863237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/testimonial-bg.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 117064\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117064,"size_decoded":117706,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x980, components 3","md5":"d70ba3b0bcc1e857e3b07f59be91a3b1","sha1":"340d772ded62f077e519f08e963f18889a29e1d7","sha256":"2ff309057326b5a60329b5729036d7962f9e09238b0394df5f01145a47beadf5","sha512":"6d86c67468303f8c2513e12eac0a731e032374fbd5ed1af2f07612be90eda09895b76c8c667484c5adb31dd4e0e6c12f005813d072a18242e002ae97cc1b8c83","ssdeep":"3072:R5cg7F8LstZeskBvXG6brLr6Ado3EcGCrWKJp:RrF0sgXTr6A2EcG+L","tlshash":"eeb3123551e25456e5e47cbbc6a2ab8aa96faf3803e90fe81c326c3dd44d6415e080df","first_seen":"2025-01-27T03:23:26.653738Z","last_seen":"2026-08-10T08:00:01.059154Z","times_seen":57,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/img/6.jpg","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.244Z","timestamp":1783877863244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/img/6.jpg HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 344761\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":344761,"size_decoded":345403,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x668, components 3","md5":"d762402b5f52d0d2ef85055f5d60797f","sha1":"f5c404877e535773c5b4573b7872229f6ff8f744","sha256":"89d7f304faa728604d9a6de820283a62b54a216da73e041b82bae500e877c292","sha512":"824ad0521d9e3fd3f2d4ede840d6ac67eaf8522aa9f485df9f48983efd73f96a146c9a4452010cca9caefccb3f2374b5eaef62a22677d45a9e67b0bf28939fa2","ssdeep":"6144:tL9fQf32wARWoIAFuCjYRBy7dp4M5kjfjbsiMJa9yu+ja9x8rywOXHhWhO8c:p5uXo1IAFM3MdGM5KsFJa+2D8ZOXw0","tlshash":"b27423d82743c238c8217708a757a91488362e0d7079ce6785e67eb6f94f8a8df27753","first_seen":"2026-06-16T01:49:07.69271Z","last_seen":"2026-08-02T04:18:16.749935Z","times_seen":25,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/s3.tradingview.com/external-embedding/embed-widget-advanced-chart.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.217Z","timestamp":1783877863217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-advanced-chart.js HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T22:48:24.473719Z","times_seen":18591654,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/js/script.js","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.224Z","timestamp":1783877863224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/js/script.js HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:43 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2593\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:43 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8159,"size_decoded":3290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5637f3b08a97f31f97474de6ec0b131d","sha1":"96103a527c4adf29b32f8c944952daad61c77260","sha256":"69a97a04acc1367acef54657c6022c7061af338ad47af096d6b5b59cad208807","sha512":"01903ce35dc7b5d185501a1df19bdf9d41c90ad7d6738e84787c57c7922faed01eee96a0e03d1827785074ea48bc1ec85c0e61764e0be24ac99468e39575c18b","ssdeep":"192:20+yeNxfIk4yHXhTahTigTJDjAEPTJVPbSE9CYvLHSYuyxmhQjExHJ5H3UG1:2vyeNN1/HxTahTigTZjAQTSE9CYvLHSJ","tlshash":"f3f18582f36da9a7413730051c7e60ceaa6c1072cc8d8db7bdfd112869e452d6176f6e","first_seen":"2023-04-27T10:46:44Z","last_seen":"2026-08-29T08:29:16.473557Z","times_seen":50,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/images/box-icon-i.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:43.245Z","timestamp":1783877863245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/images/box-icon-i.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 401\r\nx-powered-by: PHP/8.2.31\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":931,"size_decoded":1012,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6f581b1ccea7c69a07cb28ea6b8a56a4","sha1":"e482e08e3d6d72abecad3f89ed02f16389baa44d","sha256":"397332576e1f3109f6dfdb07b4f515324bb1435a81c81ffad6b86fed3bcd6736","sha512":"2edece7c04f1e61313db9bab4f89dd31a69744a41d01a98c4a0ff343ed41a3e1959bcaeb351cb46a88c308622d8f5df4f249650452d74b08bd66785990214900","ssdeep":"","tlshash":"0111636f04465abf120085627416323dd0efaf6e6e832840e4e32dabbac86c0c47d49d","first_seen":"2026-07-12T14:19:33.802054Z","last_seen":"2026-08-02T04:16:37.86443Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/images/direction-dots-a.png","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.143Z","timestamp":1783877866143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/images/direction-dots-a.png HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3151\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3151,"size_decoded":3790,"mime_type":"image/png","magic":"PNG image data, 321 x 27, 8-bit/color RGBA, non-interlaced","md5":"a5df6685dc74b94fbe6b60da00ecb1ec","sha1":"c3d54a9fec298c4cc45f35a6771fb8dfcdac6dbe","sha256":"d1a1debce3447096dd2fc088f8ab3e55ee86710c95d203de4ac19eb53d27cc67","sha512":"d0a7bde00d1bd6787a9f483f0db9828d47883781072b71f8de521ccbc88fafc6a80530ccb6f8263cd3f4837bd4bce4f0450769d38a2323dea710967a2bbcbcc7","ssdeep":"","tlshash":"9b512cde6540e8407026d9953af608131d739740cea0e795e89edd1b5a722f718046da","first_seen":"2024-12-14T20:13:44.829744Z","last_seen":"2026-08-02T04:18:16.700883Z","times_seen":32,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-vaults.top/assets/themes/deepblue/frontend/assets/fonts/Quicksand-Regular.woff2","fqdn":"capital-vaults.top","domain":"capital-vaults.top","tld":"top"},"ip":{"addr":"185.66.143.35","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-vaults.top/","date":"2026-07-12T17:37:46.187Z","timestamp":1783877866187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capital-vaults.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Jul 2026 11:54:32 GMT","end":"Fri, 02 Oct 2026 11:54:31 GMT"},"fingerprint":{"sha1":"E0:32:43:5D:59:62:B4:E8:F6:DB:8F:E5:37:A5:7D:EB:8F:53:77:6E","sha256":"C4:71:47:D3:18:E6:7B:47:BB:18:AC:D1:EB:B9:82:D8:3F:D9:3F:FA:95:F1:8B:2F:C5:9A:4B:A5:D9:63:4E:0D"}}},"request":{"raw":"GET /assets/themes/deepblue/frontend/assets/fonts/Quicksand-Regular.woff2 HTTP/1.1\r\nHost: capital-vaults.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://capital-vaults.top/assets/themes/deepblue/frontend/assets/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=a913f54a09592b5b1cb7be382c4ecc99efab5067.1783881462.1; XSRF-TOKEN=eyJpdiI6IkxTUUtFRTBZek5xSkNFSFFldjNJaGc9PSIsInZhbHVlIjoiTXAyclcwb1MxR2hLU1NPcnVEMnFQM1p4dDViNFI2bTQ1ekhYcEFicmhLc053RmV4a0VSdVAwZ3ZRRG1DTi96SmZkb0hGcnlua0lvNTEwMHBhaFphc3IvMjg3eWhBVFlnZWNxSDJMZlQyazJMRzBtUGlNU3JYSFhKSHdJL0ZhT1UiLCJtYWMiOiI0MDk5NjZkZTczODlmMTE5MDgwMTNlZDBhYzJlNjM3OTEyNWUwY2ZiYzI5MDg1MTYzMzE3MzIxNGY4YWU2M2ZhIiwidGFnIjoiIn0%3D; capital_vaults_session=eyJpdiI6ImhMd0hBc1c2US8rSitialBDNW11eGc9PSIsInZhbHVlIjoiWGlHa0JHKzQxVXNvVCtlOE5kWEhLU1E2aGQ0NDR4cFlySXJzbjB6clV3Z2E3STNlU3hLa1lvM3RpRnd4RldtbWNFcE52djA2MTU5aVQxMEJQTnJTWFZMZ0dYS3kwZnJEa3FxSmlMTlNSRlFFN2dXSHZsN2M3RG13MHlWa2NmVFgiLCJtYWMiOiI1ZDEzNzg1ODRiNzQxMjJhMDU4ZTFhNDQ1YTc3Nzk5MjJjYzBiNDg3MmJmZWQwMDIyMTg2YTg1MTU5YWZiMmJkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41736\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:37:46 GMT\r\nlast-modified: Sat, 04 Jul 2026 13:55:58 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":41736,"size_decoded":42377,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41736, version 1.0","md5":"09983c92350fafe86e3931a5170c9f98","sha1":"106d83e81ba445d38112faa5b9d31a0ca3253753","sha256":"bcb0af77a3911acf6e1dd7837164b6552ca7237dac08a9029172eda60ea667e4","sha512":"7234b07399cacd4d60087796a73331837ea12d0e1e75538681bca09dca384a549894cf85cfc9457569200e24283bebef5699a103a03d1c6c9b7d6f3ed9f549b4","ssdeep":"768:ffYRQtw3xof7pe7ZMUUY+ehUUDXGfvgDSjxoTi9jpNAauMay0E9pFy:fwRQtEC7UEehlafvZjxoTwpyPEFy","tlshash":"3c13f18432742f63c19261a147b8c7bb3487c92ece0934df016d7a46cafd6da9d36746","first_seen":"2023-07-18T12:53:32Z","last_seen":"2026-08-02T04:18:16.645607Z","times_seen":36,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"capital-vaults.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}