{"report_id":"ba081fcf-913f-443f-bdd1-fb23cb0317d3","version":0,"status":"done","tags":[],"date":"2026-09-20T20:42:00Z","url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"title":"Capital vistatrust","dom":{"size":96322,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5975)","md5":"7087ecd6303da6ffb1ac0e6741384048","sha1":"30f67a0c65216e142489edd1f6fc7ad6eead6a09","sha256":"dcbf142e0128456eea6e9d6c90dd33a6bbacdf7d721f39401d6a600f048be632","sha512":"f583c898326bf2926af8a367cab385255af74b2ac6f439f3a1a87304914bf55ec937216d190217b62d3201b885eac82e6c377700f24901d3b061d21b87759db1","ssdeep":"768:lVSYhgXrmOOOO+7eAs63BbcbsblbDSO1ybzhPTtQtJx7IR/FF22zNZ7viJBJBse/:lJhgXiOOOOAxXXSOEFtQl7IhNzQrgje","tlshash":"a193827155f2013b459380d1baa86f0eaae6e20bc6170d08b7fe0b969fc3d55fc5b258","dom_hash":"domhashce0b1a85d1e0d34b288fd8317489248c","first_seen":"2026-09-20T20:42:19.71875Z","last_seen":"2026-09-20T20:42:19.71875Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T20:42:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-19T00:44:38.330945Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.186.29.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-19T00:44:36.498741Z","alert_count":0,"request_count":1,"received_data":1578,"sent_data":581,"comment":"","tags":null,"fingerprints":null},{"fqdn":"capitalvistatrust.com.nexorbittrade.com","ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-09-20T20:42:01.291325Z","last_seen":"2026-09-20T20:42:01.291325Z","alert_count":96,"request_count":48,"received_data":3172486,"sent_data":60838,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-19T00:44:36.838476Z","alert_count":0,"request_count":4,"received_data":378711,"sent_data":1990,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-19T00:44:37.773955Z","alert_count":0,"request_count":1,"received_data":18558,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-09-18T08:24:50.025608Z","alert_count":0,"request_count":2,"received_data":23871,"sent_data":1070,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-17T14:18:32.470193Z","last_seen":"2026-09-20T13:27:23.683015Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1032,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.184.62.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-19T05:07:09.834381Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":654,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.153.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-09-14T09:02:15.710376Z","alert_count":0,"request_count":2,"received_data":32153,"sent_data":1589,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","size":152478,"data":"","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-09-20T20:51:24.258915Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/bootstrap.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","size":95320,"data":"","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-09-20T20:51:24.27791Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.easing.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","size":4137,"data":"","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-09-20T20:51:24.276157Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.countdown.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","size":7397,"data":"","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-09-20T20:51:24.261074Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/all.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"800a9eaf2195f34097d9a711473aef43","sha1":"9be370b676f037c24f879d6b79b25fc678011618","sha256":"9aff2f0629bb20834dca9e31014a7c0bb5004b87ea38322921ab2b04e9cc9682","sha512":"cb928f1a5fb4abdca91228364d82a809d8458504faa78c4e796df61c8a7ac321a1cdbe75e78bfa6484349336a674f239d7ebea31214a99c5c2736ec94e07460c","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8eK8wDKSG:MD5cEJhswtRww3O3l0r","tlshash":"1f45d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1195004,"data":"","first_seen":"2025-04-16T16:49:09.298755Z","last_seen":"2026-09-20T20:51:24.287592Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47763bd7f2dd1f4382d08390fd57543e","sha1":"02f9384db4fd1fc4fef099f30effdcf8b02ea405","sha256":"1cf5fc2e8152dd9de806c0f5cc4c3c8c643af4e766904af5351130f4803851b9","sha512":"77b376186666c380bccf3334c2ffb50b204ae71534294d2dfc65b9d4d12d1f961df14c14e6359a67b6d2c5d8325d7c6335b24af0a4f7b09d89aa28c0531de57d","ssdeep":"","tlshash":"f9c08c188032a078000a210c8ab92292322041e70e163d24b39d544a0f0aa4f43b929c","size":175,"data":"","first_seen":"2026-05-25T21:59:04.609021Z","last_seen":"2026-09-20T20:57:39.347053Z","times_seen":1523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dabcb7c866bade5fee6f6a6e89886f7","sha1":"d974c31b160e248f439f9e46f72091bf6cf0c8e8","sha256":"9d5c4d1151d896532620efed784aed33822ebcc45034332abd5a7b967ac2b4e5","sha512":"ff49e1bc6e0648efb17bb2471e39a6d049e80dac585655b870ba2588a777266cfa37cd7a55b58f748a1463552bedd762ea66a65b3f240375ad5293da64193e87","ssdeep":"","tlshash":"e2f02dd979a704b4dd5bf03e4bba22a522658e0b2805e1123d5ea5225f44a41827dff8","size":630,"data":"","first_seen":"2026-06-09T08:18:36.748079Z","last_seen":"2026-09-20T20:51:24.284509Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bac68ffaeac66a0d7cd81022a192ea3","sha1":"af901c0d1c9de7760dfbc43cbb859dbeac1cb84e","sha256":"367f8d6049c8a83bf6b2ca055538e2f353de323f2853604847adc27e6d00e179","sha512":"f5569040f6a67c20e19d13f5ee8f1590d08a016bcc482c19483e19e326c931e095fd4fdd5e0dc4d4de4713bcf0c993b95ae6b3c1c3805b724b1a185416b2a677","ssdeep":"","tlshash":"82b01228615c7004702321b14c17a8003511bd0234055800fe0c18600f08548c507844","size":87,"data":"","first_seen":"2026-06-09T07:01:51.521112Z","last_seen":"2026-09-20T20:51:24.285061Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"258b4360fe7cedf8bd27b8eb0370850d","sha1":"24c8d7dcebb5d5870107c1e1a547b5609be66f85","sha256":"feef114a47a096cc289fe5ee1a858f51da7f7f503ab869e045479bb4aa6acafa","sha512":"223f68deeab90a4a0ccd7766a150abc15d88afecb0adf41602f5453c294366e8cf8f5e567b5f0edbf94429ccffa567dbf650655aa67d87c3687742353f7e5d80","ssdeep":"","tlshash":"bec012af11404972dfb212918b873350b53961ab1e0a57127490a601fe2de03c72caca","size":191,"data":"","first_seen":"2026-06-09T07:01:51.524413Z","last_seen":"2026-09-20T20:51:24.285559Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cdbf6234c932b0028655ef806500443","sha1":"0d1cf87c9ad0491f0d0d3699d50c68b7c84f86b4","sha256":"e1eea8ee5e1920227ee7b2acb8593f1c3f9ef085eaaeb22e2d9cebdea95fdad9","sha512":"55a86e2d849596a518208310980c7ac48a7185ff8053958b29c77cef617e87d2b41e34148609e603287bf2b541b232f9770772ea94c42508c3f1e2bf4b60970f","ssdeep":"","tlshash":"47d0a79336b5003c4ffe28a6a611d7c4362be3262d519068b93b2d148f54f88a2779c8","size":236,"data":"","first_seen":"2026-06-09T07:01:51.526545Z","last_seen":"2026-09-20T20:51:24.286268Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"80a26e88f47cf5a81ddc5de9c7c28ebc","sha1":"2da7dc53851687c44e057f39b9bb15536d7596ee","sha256":"276a220f1821ac31d40652638d88c46e92caf8dd83688638050c7f1573a34c07","sha512":"80ff6c9bb7741345f7ee66422eca26fa5b3d7976777d2cdfd41b3d7dedd1d8b9db78f50ea88a3cc31ad333f7b442382558cf03d97edfe85c59b2d2a84c9725ee","ssdeep":"","tlshash":"e0e0f83c3c3840944b9600f9c1bbf2383d0a302444a0cc43d8aa88382cf1fcebd028d8","size":416,"data":"","first_seen":"2026-09-20T20:42:06.812782Z","last_seen":"2026-09-20T20:51:24.28675Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","size":33461,"data":"","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-09-20T20:51:24.28197Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/scripts.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","size":15476,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.270823Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c5f2997271c61c176f99e668240c21c","sha1":"c6cd1aa7efd5374dbe0ffa00f5543423d5764df4","sha256":"2893e60a2c1b151db1ce3b04eec8ae90dac70b145891c4d2aba385d642cadf63","sha512":"dd856a743150616ee22c1f0a90380e597d069b322fddf0bdc61c12b2dd0b0630d9751edb8a29ba3819dca71be28a58a02cde294458c13b6952dc594625024e7c","ssdeep":"384:UzCKMPZATN09o0mtvwfEXLb5TZrPCnfYE:UVMhAh060svwcXxTREB","tlshash":"bba2a42911b7103a49531265eeff165c60ba02b78004ec20bfafcdc2df956b9caa37d5","size":21650,"data":"","first_seen":"2026-09-08T00:57:08.977034Z","last_seen":"2026-09-20T23:10:17.937551Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.153.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b24417bdaff66cda96b305e672aef9ae","sha1":"53df285969aba5471ab306e7d8f0dfd5e03b49a5","sha256":"7c31a9292f956458940cf4867521416ff5a48a7239f58e0a38e610b2b326bc63","sha512":"56d5eecfe0ba7098bf493cc7715687c928bbb75b39940aad21c9f26903b3eb073204970183dea6ee94ffabc767765bfdc836759f358cf72c529992f688464282","ssdeep":"","tlshash":"df11cb7b3d80e6398658a4e4a03fc31cb1a224957c50dda110cde889e65cacadd2d5ac","size":993,"data":"","first_seen":"2026-09-16T18:14:08.073613Z","last_seen":"2026-09-20T23:20:56.873232Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-20T22:36:48.691052Z","times_seen":102985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4fd832e7/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.153.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18e9447031d7f46a75a32bbc3e5e16ad","sha1":"9cdd42f0821022c9f672588f2d2677eb465288d9","sha256":"c2dcf46501a48a87a7859596834012e81569a181f7b80bda4d91b04798f84751","sha512":"fa146f5e91906dc7b9c67a5e42fd752fddf99401e820c690cb63444b0ecdcc6ee658b477e96c017847400840229b7be713d790b5e4fda2451b52617fa22830fd","ssdeep":"384:lx1Wfl5gbnPazbj61bNocZA8BkY7K+Zq4ElTyTKjOBmBnZGSb0NeLiIvhGKkn8xD:lI5qIy5ZA8BtEypMn0MLiUs1K","tlshash":"0ac2d8cc7bb1b071437365b5802f140fb23e99aeb408ca98b288d8e16db55594637f7e","size":26882,"data":"","first_seen":"2026-08-26T05:08:10.642402Z","last_seen":"2026-09-20T22:48:45.208252Z","times_seen":1873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","size":89810,"data":"","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-09-20T20:51:24.262965Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/owl.carousel.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","size":61379,"data":"","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-09-20T20:51:24.282667Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/popper.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","size":37178,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.252808Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/mixitup.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","size":121918,"data":"","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-09-20T20:51:24.275099Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/wow.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","size":14974,"data":"","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-09-20T20:51:24.254158Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T21:03:16.918382Z","times_seen":9543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"UTC","filename":"https://capitalvistatrust.com.nexorbittrade.com/","line_number":1163,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.384Z","timestamp":1789936883384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 502\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":998,"size_decoded":741,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7dc4282260c290ab680b7d71c753e220","sha1":"8d8875c5cc9ebb56de5eefccd71353f442814cfc","sha256":"0fa873ce902e3521e474493cb4970fbcaa14dec9176fa5d3b6db455403c0c946","sha512":"3c373911b8ad629ddbb29d4c1eabe8e979444e1d73e966a0eb7ff28070a38abad8731556a640e41df6edcf2ef4f0d14c4c281a61e4454bef2522ec3919b29c2c","ssdeep":"","tlshash":"b811146f0c480fae12408661f019363cc1cf9f26ee52a480d5fb0caa7ac46cae47d15d","first_seen":"2026-09-20T20:42:06.731239Z","last_seen":"2026-09-20T20:42:19.722007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-04.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.618Z","timestamp":1789936883618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-04.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14865\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14865,"size_decoded":15131,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"437071d3ca37bbb3f3d4814e6ef6029b","sha1":"480780d285aef220034f29cf7b4d0fd1bf28e197","sha256":"699521a2c3be4cc036eef7f6990221bd6555dfcae9274a5979a9b78eda7a8627","sha512":"74ce29b27a5462cc1f602dfa41f00ab327166d807b2ce462402f3289cb082a7b6949b5fca94080e990ddc41893c6e601a8ffcb4ae544ad8fb99b291154ce9e3a","ssdeep":"384:6ERMJn+M2l9hbK+QFgZb5K4+9+zzzuHBLtVvBZ6XuZ05qtnHdG:6Eic3h1Qcb5L+9SEBLtlBfZ05UnHI","tlshash":"5262d0bacd5e4efed485f1442b205627d27a5cb37560fabc4ca6d85f04734b6c0427a1","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.257573Z","times_seen":270,"resource_available":false,"data":null}},"time_used":3025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3025,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.easing.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.594Z","timestamp":1789936883594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.easing.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 904\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4137,"size_decoded":1142,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-09-20T20:51:24.276157Z","times_seen":201,"resource_available":true,"data":null}},"time_used":2080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2080,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.810Z","timestamp":1789936883810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:24 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74\r\ndate: Sun, 20 Sep 2026 20:41:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74,"size_decoded":337,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"0935d506ad5d03bb060a5ef62605775a","sha1":"80c6896910d1ddd9f5271f389958496b1994c1b5","sha256":"2f61affc60d3b130f492a2a8d125ed73d167af85cd669ee9d4d8c5c7d407828c","sha512":"794c8986cac3ee42a5cbe4e56288df09eb5e0adf68ce29de0acda563a59f357b2ff6a4da3a8c54b5d7ba7edb330a59712f277453bfcc38a22fe5f840ef78f00d","ssdeep":"","tlshash":"67a022fe832300000f2200e30202300ace0302f820c00bc08ca003afa8e0b03302a30c","first_seen":"2024-09-11T20:09:12Z","last_seen":"2026-09-20T20:51:24.273259Z","times_seen":241,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:24.911Z","timestamp":1789936884911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:24 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 41306\r\ndate: Sun, 20 Sep 2026 20:41:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78584,"size_decoded":41618,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-09-20T20:51:24.245273Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/owl.carousel.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.599Z","timestamp":1789936883599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/owl.carousel.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 12528\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61379,"size_decoded":12768,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (785), with CRLF line terminators","md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-09-20T20:51:24.282667Z","times_seen":300,"resource_available":true,"data":null}},"time_used":2077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2064,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/magnific-popup.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.368Z","timestamp":1789936883368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/magnific-popup.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1845\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7859,"size_decoded":2156,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2aad777437b42bb818d737c73156ddb7","sha1":"6127d39b81eacab77cd834258e8f34747a793056","sha256":"44c0bc765e9c74b5e70366863a39b5db34f121c37b0b9e45ad2244c672820584","sha512":"f6eb432e3ee2ad220eb295f62c053090d8778e9fb74254e49aae248253d96bf3af18ebcafd1bda560a1e46ecf9d0c9d703ebad2debf2d2c5a2fbfc9b92eee0e2","ssdeep":"192:S+mS4tKnIQA5H2CqAEgmLioElcXC6Tikpc/gQMAGxW:dWROCz","tlshash":"7ff1fe59db112342c237dbb4dbe30719e71200639b0300abbfcd9a46affa5684661fd9","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.254851Z","times_seen":267,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/popper.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.591Z","timestamp":1789936883591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/popper.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 8623\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37178,"size_decoded":8862,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (639), with CRLF line terminators","md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.252808Z","times_seen":274,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-02.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.616Z","timestamp":1789936883616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-02.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8237\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8237,"size_decoded":8502,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"ff8a7e046de6fb8214ea806877d5fa20","sha1":"9a535c90610e914d9b9e03bb0100a3baf73d11d6","sha256":"3c5ab3b5541dd343303fa3325a3ace75cad5ca9434153a3fe4a2d364190a6f1f","sha512":"f4edb52484ddc481afe097658ee5a5c9a7c2edf75b0c7fbb539622d00ece16ee6b29a1fdd87dd405e82a8c2d281ec4d58cdc45c46b2f0bf2b786eda955f933b8","ssdeep":"192:wlHKsRiuMNz2ZeiwF4bHAZuYw3OFAhmz12th:wnRil28j4bAZuYw3nhmx6","tlshash":"74029d4dfd4049036b00c37d06c6d72b69d388d8dbe7a672a7c38459d7902bda0463d6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.277343Z","times_seen":265,"resource_available":false,"data":null}},"time_used":3036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-05.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.619Z","timestamp":1789936883619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-05.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13819\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13819,"size_decoded":14085,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"32b96d9461314a2b8a2a13b5ff2c4002","sha1":"7865e35459f48d3464fa6c7a5d6714f9049ef3ad","sha256":"039efeeffa143c48f38e94d15640321eedfac7d7308392a67c8873d5afc839bc","sha512":"40a13571ab0ed900d169f9c106346ec77936ee413b5f8f4ea17319e97fb0b1536f9b11096bd99c341103f07f2e1e032bcdf4979f2793bd98ffc9b4531f7e97c4","ssdeep":"384:pcwF2IfxHWgOUh0/iLRuTC4KkPpY7vz3I8A696Y5I:pcwxHWgOglRuTC4Kkm/nAa6Y5I","tlshash":"8252bf0e9115d54d2a0fe58225fa9387e6ed0d80d09b108bddc3d4de76361867e10b9f","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.267177Z","times_seen":270,"resource_available":false,"data":null}},"time_used":3033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3024,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/storage/app/public/photos/qjlkPBdKHpOpjKKKtPFQqDVlMLi8PCLeXhQEZqjw.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:26.978Z","timestamp":1789936886978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /storage/app/public/photos/qjlkPBdKHpOpjKKKtPFQqDVlMLi8PCLeXhQEZqjw.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106795\r\ndate: Sun, 20 Sep 2026 20:41:27 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106795,"size_decoded":107062,"mime_type":"image/png","magic":"PNG image data, 339 x 735, 8-bit/color RGBA, non-interlaced","md5":"97d9c79c41a59d63e68ee765d5446753","sha1":"4f5031322ce02572e47de5d4011b5edc9fe2f438","sha256":"e36dba9d433facf427fd2f92ae36819e6e7cbcff38c847314e1d719abb5484b3","sha512":"92baee31aec62a708a1731cf1ed0ae283a01aa3381b0503aae9f55e602cfda73fcf4fa084da3e64c594996e558d4aea08ba5938c5e5ebbbf39ca77e0d28628b4","ssdeep":"1536:mOp/JsXssta9a3F2wbv7kJsgcKzFHr6c5u8TT01x1nS+DZMU2hs46s2b7zHg909B:JzQJ27d01x1NlMSBtAi9d70ZaIV/Pc","tlshash":"f2a302f262f38a4286e4d923d75390d00f7f50581be9b56f2ca408563ddcb660576f2e","first_seen":"2026-09-20T20:42:06.763039Z","last_seen":"2026-09-20T20:51:24.274443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.585Z","timestamp":1789936883585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Sep 2026 03:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNsWwD70ZynQkbOVPUBwnfLXwjnoOKmsUsfCh08OScOo9w1BM2IHT9QoDFN3rGMZdMarGtDEmyUleojcEtpYi3OkA0rbcDRoEba8Wbvocc65VQ%2B9EasZlNHtKqkCcew5GMgbXA%3D%3D\"}]}\r\nexpires: Tue, 07 Sep 2027 21:47:34 GMT\r\ncache-control: max-age=31536000\r\netag: W/\"6a9cda0f-5492\"\r\nage: 1119231\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a3e3a6a6291d5699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21650,"size_decoded":7088,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"5c5f2997271c61c176f99e668240c21c","sha1":"c6cd1aa7efd5374dbe0ffa00f5543423d5764df4","sha256":"2893e60a2c1b151db1ce3b04eec8ae90dac70b145891c4d2aba385d642cadf63","sha512":"dd856a743150616ee22c1f0a90380e597d069b322fddf0bdc61c12b2dd0b0630d9751edb8a29ba3819dca71be28a58a02cde294458c13b6952dc594625024e7c","ssdeep":"384:UzCKMPZATN09o0mtvwfEXLb5TZrPCnfYE:UVMhAh060svwcXxTREB","tlshash":"bba2a42911b7103a49531265eeff165c60ba02b78004ec20bfafcdc2df956b9caa37d5","first_seen":"2026-09-08T00:57:08.977034Z","last_seen":"2026-09-20T23:10:17.937551Z","times_seen":155,"resource_available":true,"data":null}},"time_used":3173,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":16,"receive":0,"ssl":3151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/img/bg2.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.610Z","timestamp":1789936883610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/img/bg2.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78521\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78521,"size_decoded":78788,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"c429d9733f122b3f75dc09895f087f7e","sha1":"4afbefdcfb97514632a2ac5ce5d073bb3753af16","sha256":"2eafdcde00be6fd6f5022cf0cb185346ba43ab31c6d61570dc290726961433e2","sha512":"3da8639538bd118629ae730a4a254dcf68498c21cd8ea87155d5a311c33b9261cb8ae11bd4e8eda2cf27089c87e924374ee2e0693015e8d5ab1d54ce8d3b403f","ssdeep":"1536:kdLpweOva+ivOr+ZKbs9TOZjxIUov/IAtMTIwV5yeaI4lFPRXa:kdLl+ivOr+48SZ1II3TIGyea/Pha","tlshash":"a9730253b705e4c7f430a4579566bde8ffd58bdc26a1620a7623edbdc802f041a84a2e","first_seen":"2025-04-27T11:22:47.441839Z","last_seen":"2026-09-20T20:51:24.259692Z","times_seen":174,"resource_available":false,"data":null}},"time_used":2320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2217,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-01.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.615Z","timestamp":1789936883615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-01.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12156\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12156,"size_decoded":12422,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"54ddade7bfe79dd432e1f516e46b514b","sha1":"cc2a61c0abc58b736fe9251f9e4a6d7acbe940cb","sha256":"521e6092574d953e56c7539ee1139d6e220e0b10e56f2ff9c58c5921317d63ea","sha512":"9a516689a2c637b526ec8c69a207da819d3b6d90afe15fd8760aaf2a8dc6d5907dc5b8d1a5e8e903ea0365f02205409d392358fae71b2b1bcf691be4c6686517","ssdeep":"192:hEnvsBGBktTlyIpaaNdI8QCa3bIMzhq0IjSdBXJxXcaZdaiXtNTmO49ehNp:yqTly5aodX3bIvZuXLJ9L490v","tlshash":"8e42bf5bae505714a12afacb7c9d40e7842307391084d56dc28b5d134bac8be0b8e3df","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.271994Z","times_seen":253,"resource_available":false,"data":null}},"time_used":2267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2258,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-03.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.617Z","timestamp":1789936883617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-03.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14568\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14568,"size_decoded":14834,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"8a8f38079225ce11ba10b8eae50775ab","sha1":"a2c13028e4e9e3c09af2ffba6d13186305590aee","sha256":"463110f47af141b30ef89a82da810081694ae34b40f6b9fcea044a8d90e85174","sha512":"b7d5717a876972373e1002a9bd5251b7301bcc27f1a99fa8dfbd27b7258ac76619222b53d4407bd775c975cafdbd968c5b4e54d0d9d7dfc90e1a474ed1883697","ssdeep":"384:3VbtTwSIEeChYgAmVRLV1ObcdQO+oYqCiZsUkS:3zTVeCCglVRLV1ObcdHyqCuNP","tlshash":"f262c0fbd42204815af5c1bd14e3da5fb9333a8893e732d030a7b55c1ed961402a9baa","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.264328Z","times_seen":271,"resource_available":false,"data":null}},"time_used":3035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BPT5w8s3.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:32.816Z","timestamp":1789936892816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BPT5w8s3.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-3e9c\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k3gwsQ3mNfM23g6fymrhhrZ5g1efLDTFRWsIDsApGejnFkEmIlv748Xh0Z2VshpHBtvtEnY\r\nx-77-nzt-ray: e2f75420226753432145b06a5f02f830\r\nage: 475316\r\nx-77-cache: HIT\r\nx-77-age: 475282\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6769,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"3548e3eff8e1868b716127efa99cb827","sha1":"b7851100835c8503db0855767eed7fd9b6ea0256","sha256":"5d183c1962f6085d86e7f85b799c50f3000f0444856d623063f0b68ca6608a7d","sha512":"00ec239fba1b3c30dbaa2e2f26d72357fc55fba2ad6e6f55a168374519d8a1fe4de774813df55cc14b8174666851c97d68074068913006eb5bc505e0fc324b98","ssdeep":"384:0NpFT88tMPdBgaw5O+mvRan7/qKsDoKEwA3Q+crsbUzgfTtQfQIeIU:0NpFX+dBgaw5O+aanrmoKRA3Q+cwbUwL","tlshash":"f972e8741210783f712f6c492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-15T08:49:00.602794Z","last_seen":"2026-09-20T20:57:36.067068Z","times_seen":176,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.365Z","timestamp":1789936883365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 502\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":998,"size_decoded":799,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7dc4282260c290ab680b7d71c753e220","sha1":"8d8875c5cc9ebb56de5eefccd71353f442814cfc","sha256":"0fa873ce902e3521e474493cb4970fbcaa14dec9176fa5d3b6db455403c0c946","sha512":"3c373911b8ad629ddbb29d4c1eabe8e979444e1d73e966a0eb7ff28070a38abad8731556a640e41df6edcf2ef4f0d14c4c281a61e4454bef2522ec3919b29c2c","ssdeep":"","tlshash":"b811146f0c480fae12408661f019363cc1cf9f26ee52a480d5fb0caa7ac46cae47d15d","first_seen":"2026-09-20T20:42:06.731239Z","last_seen":"2026-09-20T20:42:19.722007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/avatars/3.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.612Z","timestamp":1789936883612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/3.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44093\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44093,"size_decoded":44360,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 262x300, components 3","md5":"f9803c06337122374cf63d87de873957","sha1":"7d7520c14d3ad58e331f683232edb7e16ae0f80b","sha256":"0bc9bc7c82c1f4ee2066781ecf80c48fd8b1ccaaf50101170e0e607108a01800","sha512":"ecd28e3c419e1d05a4ad0635586e2319b2a4d21fd180769c06be15546db4f05ae5cb393504e2a6d316975917899e857a6e98605b70b39e136f60847f770942ce","ssdeep":"768:ZD24WP7LftOvCDuRl2vF/Ta4LVGf0+nljGIEGKvud0p9tuNF2q1zoW+1DpILZdl:Z4P7ZOqK/2vVTnGMMljGpG8uaUzmZwZf","tlshash":"7b13021cb59a1c60cb588841566bd4bb74bae9eb6c0fe89d0e0843ae7164cd439ccf39","first_seen":"2025-04-27T11:22:47.443312Z","last_seen":"2026-09-20T20:51:24.278432Z","times_seen":191,"resource_available":false,"data":null}},"time_used":2309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-07.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.621Z","timestamp":1789936883621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-07.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3448\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3448,"size_decoded":3713,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19e897af73d97018482aa1e0f78cdcc","sha1":"76f2342bdb0a4cf9a595c6822c79a04aaedba6d7","sha256":"b927b2e10953b20c99e848b6b9b101db928bf73193a0ec6a72e75aebad08662b","sha512":"18f4c4095a26f3c3a8cd3894ec86f1532e1096a9202f67f9db32712195fa033f6b19316137e945a9f53fae5190ac84b2525ad832b1d528bc5dcaa913722a4e4a","ssdeep":"","tlshash":"51612d68d9414ad117dcb3d514f341e149219980cddaa5b56fd8f8570a022f671178e7","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.278984Z","times_seen":266,"resource_available":false,"data":null}},"time_used":3030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/owl.theme.default.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.380Z","timestamp":1789936883380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/owl.theme.default.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 522\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":832,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef9c02a9d33951f1ac6f547bfefdb72f","sha1":"53a61837620bdfebeab0325689e58c5d37b5d3a5","sha256":"b64ffcd5f35a7e4dfef1fede979637b6901018699c5e36b5c7ff88a2f472ab1f","sha512":"3a714d7084ddc37e4581571cdd75e8fc26e721d7ec7ece79b6f149b9745599a3c36b8668f4a55c6e5f0250ce63fc503f83ca10010081d63d086ae74fe76f4c71","ssdeep":"","tlshash":"7221abc4f216210f743386e01b688247fb5e243b0a4d09e8f5da9114cf7c904aa6ef6c","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.269402Z","times_seen":300,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/responsive.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.382Z","timestamp":1789936883382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/responsive.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 788\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3516,"size_decoded":1098,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccf04542457e883d3bdbc2d98bf8fdbe","sha1":"8f5a67d5e52dde1e135ca1b781bb6c7d922cb251","sha256":"e7ed8dbc96e395c823b8a607158db76a236253ea8227ab5885646b62d17e41da","sha512":"59dc7870e4f6048f6e5bb0acfe877a2bc4bd142e92c84c8b57337840d4dd71fcb8cf59e3d766e464e020a125adc581017a353ec991b40350c6aa04361340aabd","ssdeep":"","tlshash":"fe71d94f2a4210094577737ae3a7a155fe2648b3d38ae1f1bd9c2210cf785994522f8d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.261682Z","times_seen":264,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/customstyle.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.386Z","timestamp":1789936883386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/customstyle.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1690\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7188,"size_decoded":2001,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a1ae24bf6f813e147677647e762fc912","sha1":"5bf79ee2685fc94cfcdbd8011ac411f685e1a5e3","sha256":"daec1d9695fb37769643d97e5b9040a213ca6daeeecf9726033bdebe474d3d7d","sha512":"33626e32e5f7bb64699a23c39034824b6002c0f895beccdcc89f95edef83c9b74fb198d55122af619c3aa9412194a236ece85192ffeb11509a04df08e78981c6","ssdeep":"96:xkyRNTHQ1zl5+AQRRnbfdfc5SRPdRff8f5EW:xkUNTHQR2AGVbVUARPdRX8f+W","tlshash":"e8e19a1aea110602643ba376e7a3b35def6a4013c30195f87fcd72644fb56a88765f8c","first_seen":"2025-04-16T16:49:09.309316Z","last_seen":"2026-09-20T20:51:24.262294Z","times_seen":193,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.815Z","timestamp":1789936883815,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T22:48:28.428778Z","times_seen":18574994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/all.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.601Z","timestamp":1789936883601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/all.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 401297\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1195004,"size_decoded":401538,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65346), with CRLF line terminators","md5":"56fbbd387be498196d980e0213ecbf2f","sha1":"60698c43302313ce9681de3cdfe11b4e6c8e20e8","sha256":"38744741f55e4aa0ce2c92600c51a5a15d12e6f96bfe50a136a7a286f020ec8d","sha512":"658afff9cb3a78cde5fc1484a132c41857bf08b4c1177e031f1f2d736a47a96c96c05d53a7444b4967864c5d319d6072e4d527562443eba0c84349575e6a9823","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8x:MD5cEJhswtRww3O3lv","tlshash":"6525c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-08-03T01:22:52.614063Z","last_seen":"2026-09-20T20:51:24.280791Z","times_seen":188,"resource_available":true,"data":null}},"time_used":2271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2075,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:29.436Z","timestamp":1789936889436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:32 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa903df-891\"\r\nexpires: Tue, 15 Sep 2026 08:45:00 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: kz3MKIAnSJdXGBPDcRn9srblHEcaGebvjGthbDDeBiy2j+AepRUO7JNovMrnoR06GuSiJoY\r\nx-77-nzt-ray: e2f75420226753432145b06a043b972e\r\nage: 475292\r\nx-77-cache: HIT\r\nx-77-age: 3152\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1045,"mime_type":"application/json","magic":"JSON text data","md5":"d3bf99e1aae5fe61840075977c32fc08","sha1":"92e9f68592ad767e421e2d9d0fc2dc090fdbfc7d","sha256":"a46e74c0e02a932725399c083e9c080d89a74355efdc44c0e689384355c3220d","sha512":"7a0d22bc90615e11450cfa9de74c58942a1a0872f1e94cb70fae4aaa556c4bc85bf088a5f4072fc81550de014285423822523f5aeb8c5f1079dcd480817ce904","ssdeep":"","tlshash":"7b415783c4b80d431b8c262bb89655415d50c3c7ec893d4e766e9a7f2f4cea910e677d","first_seen":"2026-09-15T08:49:00.586011Z","last_seen":"2026-09-20T20:55:55.054533Z","times_seen":174,"resource_available":true,"data":null}},"time_used":3350,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.589Z","timestamp":1789936883589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 35246\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152478,"size_decoded":35486,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526), with CRLF line terminators","md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-09-20T20:51:24.258915Z","times_seen":279,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.countdown.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.600Z","timestamp":1789936883600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.countdown.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2680\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7397,"size_decoded":2919,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (459), with CRLF line terminators","md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-09-20T20:51:24.261074Z","times_seen":208,"resource_available":true,"data":null}},"time_used":2076,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2070,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-08.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.623Z","timestamp":1789936883623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-08.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14038\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14038,"size_decoded":14304,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7d917afc12aa287c0e2d9dab0e0ef9ff","sha1":"bb76c571f887250487592a977a13ec2fa6ce8ae3","sha256":"bcd5bcb3fcdb29f85d0bb0435ced0cf4e4e1789e7c701663a1cfa626895eab79","sha512":"a96f73c9a4d6a7ba28c8f6eb1bc6f5fb9b4a75ec5f47d32c597b62f75f82ef0f42237af6b8bd12fafdee3bb394959ec5e276f5163705d53408546fee54a68fcd","ssdeep":"384:3HJdaqhRn7xglRDLF+nvlQgSB0E4mSEJgEOo:3p/FmR6tQ5yE4S/Oo","tlshash":"6252cf09289e2e101158ba475f5bd220185b0dbccd937d7c79dc91a6d3f8ef2a09c8f6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.279569Z","times_seen":269,"resource_available":false,"data":null}},"time_used":3028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3028,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/static/base/img/slider-img-3.html","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.760Z","timestamp":1789936883760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/static/base/img/slider-img-3.html HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 733\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":965,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-09-20T20:51:24.267993Z","times_seen":41614,"resource_available":true,"data":null}},"time_used":3022,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.184.62.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:36.283Z","timestamp":1789936896283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Aq3VqJb8ct20jvm7MWUtkA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 20 Sep 2026 20:41:36 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GtNwNjodJ+ihOKGFQ35Gy1zI+vE=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T22:48:28.428778Z","times_seen":18574994,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":76,"connect":93,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.588Z","timestamp":1789936883588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 502\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":998,"size_decoded":741,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7dc4282260c290ab680b7d71c753e220","sha1":"8d8875c5cc9ebb56de5eefccd71353f442814cfc","sha256":"0fa873ce902e3521e474493cb4970fbcaa14dec9176fa5d3b6db455403c0c946","sha512":"3c373911b8ad629ddbb29d4c1eabe8e979444e1d73e966a0eb7ff28070a38abad8731556a640e41df6edcf2ef4f0d14c4c281a61e4454bef2522ec3919b29c2c","ssdeep":"","tlshash":"b811146f0c480fae12408661f019363cc1cf9f26ee52a480d5fb0caa7ac46cae47d15d","first_seen":"2026-09-20T20:42:06.731239Z","last_seen":"2026-09-20T20:42:19.722007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/scripts.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.602Z","timestamp":1789936883602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/scripts.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3595\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15476,"size_decoded":3834,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.270823Z","times_seen":268,"resource_available":true,"data":null}},"time_used":2074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2070,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/webfonts/fa-solid-900.woff2","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.812Z","timestamp":1789936883812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:24 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74348\r\ndate: Sun, 20 Sep 2026 20:41:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74348,"size_decoded":74615,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-09-20T20:51:24.258238Z","times_seen":5900,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T20:41:22.704Z","timestamp":1789936882704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; expires=Sun, 13-Dec-2026 04:41:23 GMT; Max-Age=7200000; path=/; samesite=lax; secure\ncapitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D; expires=Sun, 13-Dec-2026 04:41:23 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 12467\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-12-13T04:41:23Z","raw_expires":"Sun, 13-Dec-2026 04:41:23 GMT","max_age":7200000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; expires=Sun, 13-Dec-2026 04:41:23 GMT; Max-Age=7200000; path=/; samesite=lax; secure"},{"name":"capitalvistatrust_session","value":"eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-12-13T04:41:23Z","raw_expires":"Sun, 13-Dec-2026 04:41:23 GMT","max_age":7200000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D; expires=Sun, 13-Dec-2026 04:41:23 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":66422,"size_decoded":13704,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (418)","md5":"0d73162f35581d9b654c678d2ebbfa33","sha1":"3a60df9274f2f1e125f0fc54bc9f92e15cbd40fa","sha256":"b4ec6042c68d7607c326897789b280440e04c788498330caae6508f81c27bf1d","sha512":"a16c976a7421193cec6fb0f108ac80e9c5466bd6ecedc726e5518362ebc26c2e499ffff53520fc528a7aa44241434795b4d7cd0fe7afadb41257939358d1354d","ssdeep":"768:+VWZ/OOOOekdBbcbsblbDSOxybzhiT3KVJj/kj/FAJCPm+Y:+GOOOOHFSOge3K//kzuJChY","tlshash":"44533f21a4f5123b01a380e17aa5ab1bafe5e10bda1f461876fd0bd81fd3c82dd5725c","first_seen":"2026-09-20T20:42:19.743558Z","last_seen":"2026-09-20T20:42:19.743558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":4,"connect":73,"send":0,"wait":248,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/bootstrap.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.367Z","timestamp":1789936883367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/bootstrap.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 22895\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213784,"size_decoded":23207,"mime_type":"text/css","magic":"ASCII text, with very long lines (566), with CRLF line terminators","md5":"1a811fd7a5e52578985135b39a1664f8","sha1":"81989657aa78b1470ba4cc82761c36f0f6db139c","sha256":"b91adb9cc84595f9b4e46f6cdc2674b40199b9d6cbb81e7685a36fd59d962b36","sha512":"169656155090225470dcbb3503d7123d81851e3a7c611a851f902ddb567ef0ff990ef3b0ac631bb2ca8534b271026460d78647835f282d72f84afdc52722fb2d","ssdeep":"1536:BQLz5JZGAN8eO9tgTrocYU7R8cMdd3jN0oE5aQFCHiv00EOR3rXP1bJG3xKJBIr1:mwE8ezn8G6uLawupgBregZrE","tlshash":"1724551ae95121065973cb7c53e17765ffba0167ca0186aa7ede73008ff97d08922e8c","first_seen":"2025-04-16T16:49:09.303518Z","last_seen":"2026-09-20T20:51:24.275632Z","times_seen":197,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/avatars/2.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.613Z","timestamp":1789936883613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/2.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40309\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40309,"size_decoded":40576,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"fa34908c05fa685dee8c7f0d37d3e1be","sha1":"bd41c332afdc57c496152b42f068097fffd71b4d","sha256":"c79c0fbf58e412c0ec0a1bd1a5806daa30bb3ff657bb4577c2d595e628d8b268","sha512":"de8a3ca78207c7a683a1e3ad3bec196e85a10d0e8e118576edc6bb79032c23df1d3dc9c39630ea68bc226adb6cf4d5b809753ef44b51e7aab506fa5869a21f5d","ssdeep":"768:pbVw5YCxlRVA+vQ3knpIqcsPoJdDHctrTkknh6W:pbVaYA/AXWPonQ9Akh6W","tlshash":"0603f2ca9be82145eba955b8d9e3df59d76a80e9d03233e2bb5506738b3de03c05047c","first_seen":"2025-04-27T11:22:47.435561Z","last_seen":"2026-09-20T20:51:24.263649Z","times_seen":191,"resource_available":false,"data":null}},"time_used":2316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2256,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/img/innovate.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.759Z","timestamp":1789936883759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/img/innovate.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/customstyle.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44134\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44134,"size_decoded":44401,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x500, components 3","md5":"65e1281c13a4a6c5cbfc57eeb70eefb9","sha1":"17c12e43d713051456362a91d957e2717d879b2e","sha256":"7d4a6a11aef0d31d880c7190722fb0f6cb1aee94b178067be0e9a97bf2cbcf6d","sha512":"e999277328d1b1be235ca5fd4a2db4c46bcb25cc3d50bea6ed5802808dc56491c78d4f6da33860cdf8c33df7673149a36f6e4ffc1fc812c89d6e5600b4e5e048","ssdeep":"768:onRols/JgR2xyej2bCUJHEr3824pHXOyO922+YoKVNXvR1ugdhMsUQ7V7C:onRX/JgR2xygXtcXMbZ1ugdhBm","tlshash":"b713024b6b921051c8e5c232b9c24709f93c03da3a2bfe93d5016794d716feace605e1","first_seen":"2025-04-27T11:22:47.41813Z","last_seen":"2026-09-20T20:51:24.281375Z","times_seen":163,"resource_available":false,"data":null}},"time_used":3023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2976,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/owl.carousel.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.378Z","timestamp":1789936883378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/owl.carousel.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1148\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4337,"size_decoded":1459,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9843ea449af1cd03ec3e44c854f42347","sha1":"4c0c46eedbb43465f866878d4081a3ca5f9e060a","sha256":"8a53e08937c56d0ca2c80ce4dd719cac4393f8f28aed062116850b1e26a08ee6","sha512":"e421174abce281cef8f4db552a7c1750d5f773035d99191ab8f75dd50ae00664098c07f849759a7ee8c78b79cd5ba33cf1625bc5c493738e5e57c4de882518eb","ssdeep":"96:3QgSZ+nXSV+8QmmcJeXhrUTJh39DyAAFdh0g0FarLvV7Kmiyb:QZ+nXQQzd2l/yP73vgnyb","tlshash":"949159e42226114f593b87a01bed8a56f87d84638c061104b6eb470a4ffea68911ff6e","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.265694Z","times_seen":256,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.385Z","timestamp":1789936883385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-powered-by: PHP/8.2.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 502\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":998,"size_decoded":741,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7dc4282260c290ab680b7d71c753e220","sha1":"8d8875c5cc9ebb56de5eefccd71353f442814cfc","sha256":"0fa873ce902e3521e474493cb4970fbcaa14dec9176fa5d3b6db455403c0c946","sha512":"3c373911b8ad629ddbb29d4c1eabe8e979444e1d73e966a0eb7ff28070a38abad8731556a640e41df6edcf2ef4f0d14c4c281a61e4454bef2522ec3919b29c2c","ssdeep":"","tlshash":"b811146f0c480fae12408661f019363cc1cf9f26ee52a480d5fb0caa7ac46cae47d15d","first_seen":"2026-09-20T20:42:06.731239Z","last_seen":"2026-09-20T20:42:19.722007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/mixitup.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.597Z","timestamp":1789936883597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/mixitup.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 22799\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121918,"size_decoded":23039,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (997), with CRLF line terminators","md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-09-20T20:51:24.275099Z","times_seen":271,"resource_available":true,"data":null}},"time_used":2078,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2050,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/storage/app/public/photos/wAddaDwqYPGWNR16l2vX3mdvQ0LovQs8GMdWUrx4.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.609Z","timestamp":1789936883609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /storage/app/public/photos/wAddaDwqYPGWNR16l2vX3mdvQ0LovQs8GMdWUrx4.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57450\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57450,"size_decoded":57716,"mime_type":"image/png","magic":"PNG image data, 500 x 125, 8-bit/color RGBA, non-interlaced","md5":"a6f3046b836a1b1120cb30ca4dbb6d3e","sha1":"099343eb7271c091d8c34ca8ea6470789d757d0f","sha256":"866c0369a37c1f015f1d39c1ae112372a9a0cc8a2e9997f4cdf83aa9b0d214b3","sha512":"8738dbbf8ae345b505c4b6aa67f06e69365fd2a25e07aa5d4d4540b3d438a1887e5844b051074f3f611808323c4e03e7139b98c5c3e136886d640c3550f4ed21","ssdeep":"1536:x978fqFgjZ851/euk6uMRPaaQfGyGTiaEOmgtmqKaTm:fyqFg+5Feu3uAueZmaoqxm","tlshash":"f143f1b79c8863b4956c2f06bb11a6505cecec51d2db221a0d2e7717ec322f6133349b","first_seen":"2026-09-20T20:42:06.762076Z","last_seen":"2026-09-20T20:51:24.2567Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2156,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.153.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:26.878Z","timestamp":1789936886878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /iframe_api?v=3.2.10 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-ZrSYLMO1XBHwihQ9b71_Wg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\nexpires: Sun, 20 Sep 2026 20:41:27 GMT\r\ndate: Sun, 20 Sep 2026 20:41:27 GMT\r\ncache-control: private, max-age=0\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=21.YT=Np3SiGjInk1DITPqaf_khhsaZxu6H50pBejAiwMbry9PJZKD3VMDxiCqc3mlogVxpZ8eKgrV47n758MFqCAVFqIvCplOCmbfRfR2OySTNp-kEmIsJuBOTsLYP9ySfB9M7oGNnsithOXiyWEHG6N1QpNDfef5mKRx5gzO4BpgQU4yiv2U2QMwRqGCUH658OmRC2kDNlFKCJZXWYewaGZQ-0wnlKbwiUL1f9LD7O3CfOuWjnMnpXE2B44jBLvoYZ_CW0ni5hsD_O7JAUl5PTk9d4ODzxr_xs3tZQ2X3JbmSKcOv9wCgCDm6TUIMYWNY4VNuHdhr9GJr5ssMcu6buehDA; expires=Fri, 19-Mar-2027 20:41:27 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=jyNuDlvloQs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CNX-5YDSmZTJlwEQqJTJwoL-lgMYqJTJwoL-lgM%3D; Domain=youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 25-Dec-2023 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=zD7tx60Q53U; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgTw%3D%3D; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"21.YT=Np3SiGjInk1DITPqaf_khhsaZxu6H50pBejAiwMbry9PJZKD3VMDxiCqc3mlogVxpZ8eKgrV47n758MFqCAVFqIvCplOCmbfRfR2OySTNp-kEmIsJuBOTsLYP9ySfB9M7oGNnsithOXiyWEHG6N1QpNDfef5mKRx5gzO4BpgQU4yiv2U2QMwRqGCUH658OmRC2kDNlFKCJZXWYewaGZQ-0wnlKbwiUL1f9LD7O3CfOuWjnMnpXE2B44jBLvoYZ_CW0ni5hsD_O7JAUl5PTk9d4ODzxr_xs3tZQ2X3JbmSKcOv9wCgCDm6TUIMYWNY4VNuHdhr9GJr5ssMcu6buehDA","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T20:41:27Z","raw_expires":"Fri, 19-Mar-2027 20:41:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__Secure-YNID=21.YT=Np3SiGjInk1DITPqaf_khhsaZxu6H50pBejAiwMbry9PJZKD3VMDxiCqc3mlogVxpZ8eKgrV47n758MFqCAVFqIvCplOCmbfRfR2OySTNp-kEmIsJuBOTsLYP9ySfB9M7oGNnsithOXiyWEHG6N1QpNDfef5mKRx5gzO4BpgQU4yiv2U2QMwRqGCUH658OmRC2kDNlFKCJZXWYewaGZQ-0wnlKbwiUL1f9LD7O3CfOuWjnMnpXE2B44jBLvoYZ_CW0ni5hsD_O7JAUl5PTk9d4ODzxr_xs3tZQ2X3JbmSKcOv9wCgCDm6TUIMYWNY4VNuHdhr9GJr5ssMcu6buehDA; expires=Fri, 19-Mar-2027 20:41:27 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none"},{"name":"YSC","value":"jyNuDlvloQs","quoted":false,"path":"/","domain":".youtube.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"YSC=jyNuDlvloQs; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CNX-5YDSmZTJlwEQqJTJwoL-lgMYqJTJwoL-lgM%3D","quoted":false,"path":"/","domain":"youtube.com","expires":"2027-03-19T20:41:27Z","raw_expires":"Fri, 19-Mar-2027 20:41:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Secure-ROLLOUT_TOKEN=CNX-5YDSmZTJlwEQqJTJwoL-lgMYqJTJwoL-lgM%3D; Domain=youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned"},{"name":"__Secure-YEC","value":"","quoted":false,"path":"/","domain":".youtube.com","expires":"2023-12-25T20:41:27Z","raw_expires":"Mon, 25-Dec-2023 20:41:27 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 25-Dec-2023 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"VISITOR_INFO1_LIVE","value":"zD7tx60Q53U","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T20:41:27Z","raw_expires":"Fri, 19-Mar-2027 20:41:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_INFO1_LIVE=zD7tx60Q53U; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgTw%3D%3D","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-03-19T20:41:27Z","raw_expires":"Fri, 19-Mar-2027 20:41:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgTw%3D%3D; Domain=.youtube.com; Expires=Fri, 19-Mar-2027 20:41:27 GMT; Path=/; Secure; HttpOnly; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":4080,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"b24417bdaff66cda96b305e672aef9ae","sha1":"53df285969aba5471ab306e7d8f0dfd5e03b49a5","sha256":"7c31a9292f956458940cf4867521416ff5a48a7239f58e0a38e610b2b326bc63","sha512":"56d5eecfe0ba7098bf493cc7715687c928bbb75b39940aad21c9f26903b3eb073204970183dea6ee94ffabc767765bfdc836759f358cf72c529992f688464282","ssdeep":"","tlshash":"df11cb7b3d80e6398658a4e4a03fc31cb1a224957c50dda110cde889e65cacadd2d5ac","first_seen":"2026-09-16T18:14:08.073613Z","last_seen":"2026-09-20T23:20:56.873232Z","times_seen":302,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":35,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:32.820Z","timestamp":1789936892820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:32 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k7xGVZEJO1BNMv612vXAPGsq6q/bIvOKonFi/442i0s+C4rft7tGltXa7wgqSG7LjlZtYe0\r\nx-77-nzt-ray: e2f75420226753432145b06a89c42631\r\nage: 475316\r\nx-77-cache: HIT\r\nx-77-age: 475284\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8226,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-20T20:55:55.053163Z","times_seen":174,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/themify-icons.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.369Z","timestamp":1789936883369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/themify-icons.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2779\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19425,"size_decoded":3090,"mime_type":"text/css","magic":"ASCII text, with very long lines (328), with CRLF line terminators","md5":"fba3cdd3ecf4d9b4355e13af6b632f13","sha1":"12f413adc203313fd0fbe1a000e77dc61edd873f","sha256":"3a02e0315d6259facfa5d69c2ff34559e80b802b92a5f57ab4a18538bfe43330","sha512":"81dcf645b09fc5151db59d55b23051a191d2d910745e5d6526f5a87b4a06b90bc2a5c8c8ba2f60ef832a0e9af158e8c5339284b39197084d96e683c75497a507","ssdeep":"192:EtlTgzkORrPbfc7awA+PsdkiKUxHYyObuFMqQY9dlY52egvDARVJmzplQJ/:4gzDPkCzTkYXRbMilQZ","tlshash":"9792d0f8906f14a65723da51e3436a16eb05b636db420c5cf293ee4c5ee3a21d1c2edc","first_seen":"2025-04-16T16:49:09.299742Z","last_seen":"2026-09-20T20:51:24.255572Z","times_seen":191,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/animate.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.372Z","timestamp":1789936883372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/animate.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 4441\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83528,"size_decoded":4752,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e45ee68bfae20a52bb319e40c1b04d2","sha1":"7391a7bb4ef5a2cad2a4033a7b0af054955233cf","sha256":"1b57004d81d1c2c765ef74b9dd93a75de620cc1c6d4a9cc1c8ebbf2877721dc9","sha512":"922a48837620532fffba1107a3c7618bd559e8709e4ae9fb529b6d4fe85f3d24a6c3d5542501176fd7b420b4f0a04d9e6c093873360a1330a000ae22bf306d58","ssdeep":"768:i1k1R4W4J1I184Y4w4o4+VkVK4q4z/3K3F7o7T9:74W4t4Y4w4o4Y4q4z/3K3F7o7T9","tlshash":"6f83d86e2840114447330b76d3de4e68ea3da57318222dea73de598b8f76f6853c9e07","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.268723Z","times_seen":272,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/jquery.mb.YTPlayer.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.376Z","timestamp":1789936883376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/jquery.mb.YTPlayer.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 5307\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10465,"size_decoded":5618,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048)","md5":"901273a083005ed8f05f19c235e1618e","sha1":"1c679b75452eb6fcd43e6d5a7c2bf5c1312529f3","sha256":"89122a24b64349cf4d1ae941cd23ca2a06460b807b732c3b2884869139fbcc25","sha512":"69470175bc1d4db318a8b96fcd215b73a3088d29f533484b82dfadcc14af85c034c8192b0ec8a1fc071a9d7cf0abe907dc3df453a4715a36ecbde4cb22717ea6","ssdeep":"192:y23C2pkgW7wRjcXpiOHdFqeVVVwJO7W8NUFbL0t2gvMgDY:z3CLH3FLqFHv","tlshash":"9022f9357eeb2b41651bc65827ba1bec2f181013124bccedbb957348cf5d69e48a0f88","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-09-20T20:51:24.283372Z","times_seen":242,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/style.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.381Z","timestamp":1789936883381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/style.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 14583\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90535,"size_decoded":14895,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"ecb0ac78b6cb311082049439baa00710","sha1":"46952da0c64ad55980358270bb2b2f08b93a14bc","sha256":"9dde11e2b1c9e0d357a303138b9fb46d6aacdb10bfdbaf56172a4e8968fbe831","sha512":"47b490600e24db502f4c99019a6a1a401a6f320641925667ddc3946ac12bffe2ae872f270604b6b9b2333be79d1ec54fc0324de0e8fb9de1e390df3b19387d9d","ssdeep":"1536:ASKXDBVAlXHlXUzp/8bTWKeLlXTsp4Awhsr2hOAV:PyDBVVJ9l","tlshash":"de9356ac96021146a237df746be54318fb784023ca1705acbbcda2414ff677c86a6f9d","first_seen":"2025-04-16T16:49:09.313105Z","last_seen":"2026-09-20T20:51:24.266547Z","times_seen":182,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:32.934Z","timestamp":1789936892934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k38xyDX4jaGlnD8hiAo6fthNp4f7WCpmfTQml7a57Vr1f/USxWalJTjj9+cCC8KbS2LR6LY\r\nx-77-nzt-ray: e2f75420408f38a42545b06ac728680e\r\nage: 364\r\nx-77-cache: HIT\r\nx-77-age: 363\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-20T20:55:55.043354Z","times_seen":1661,"resource_available":true,"data":null}},"time_used":3325,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":23,"receive":0,"ssl":3263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.587Z","timestamp":1789936883587,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T22:48:28.428778Z","times_seen":18574994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/bootstrap.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.592Z","timestamp":1789936883592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/bootstrap.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 17083\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95320,"size_decoded":17323,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (513), with CRLF line terminators","md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-09-20T20:51:24.27791Z","times_seen":212,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.593Z","timestamp":1789936883593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 8512\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33461,"size_decoded":8751,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with CRLF line terminators","md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-09-20T20:51:24.28197Z","times_seen":327,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/clients-logo-06.png","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.620Z","timestamp":1789936883620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-06.png HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18102\r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18102,"size_decoded":18368,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7620d1c169784f5c388bcd5df851e9c8","sha1":"8e4bc8160bd68d03b6b9f36dfa8aed0173ba6137","sha256":"f8dc6379062e3b9328a95a988b3b7109e267e22f47a6e52d63f971b7d025f3a4","sha512":"88ef144ffd75fca4a9d7ef1f06b24c903c07b939d7bc0360e27c511328b752372a5db0bee91553d6984f5a4874452816374c14ace81d4a9d3d2c50a38688c268","ssdeep":"384:jFf2VId+0frhaHXEjpDUJ3lEZ8iEXBcuugFp5mdkCLZ6A7tMWC:Rf2VId+UCEjhUP8EXBccr5mdkC3Jy","tlshash":"d582c0ad7339821e8355fbc1157b20eeaa5cdf86cb1a5084e9e7dbf26c02395408d187","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-09-20T20:51:24.248395Z","times_seen":267,"resource_available":false,"data":null}},"time_used":3031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3023,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/4fd832e7/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.153.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:27.080Z","timestamp":1789936887080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /s/player/4fd832e7/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: __Secure-YNID=21.YT=Np3SiGjInk1DITPqaf_khhsaZxu6H50pBejAiwMbry9PJZKD3VMDxiCqc3mlogVxpZ8eKgrV47n758MFqCAVFqIvCplOCmbfRfR2OySTNp-kEmIsJuBOTsLYP9ySfB9M7oGNnsithOXiyWEHG6N1QpNDfef5mKRx5gzO4BpgQU4yiv2U2QMwRqGCUH658OmRC2kDNlFKCJZXWYewaGZQ-0wnlKbwiUL1f9LD7O3CfOuWjnMnpXE2B44jBLvoYZ_CW0ni5hsD_O7JAUl5PTk9d4ODzxr_xs3tZQ2X3JbmSKcOv9wCgCDm6TUIMYWNY4VNuHdhr9GJr5ssMcu6buehDA; YSC=jyNuDlvloQs; __Secure-ROLLOUT_TOKEN=CNX-5YDSmZTJlwEQqJTJwoL-lgMYqJTJwoL-lgM%3D; VISITOR_INFO1_LIVE=zD7tx60Q53U; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgTw%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 8877\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 06:33:32 GMT\r\nexpires: Mon, 20 Sep 2027 06:33:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 16 Sep 2026 04:40:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 50875\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26882,"size_decoded":9562,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"18e9447031d7f46a75a32bbc3e5e16ad","sha1":"9cdd42f0821022c9f672588f2d2677eb465288d9","sha256":"c2dcf46501a48a87a7859596834012e81569a181f7b80bda4d91b04798f84751","sha512":"fa146f5e91906dc7b9c67a5e42fd752fddf99401e820c690cb63444b0ecdcc6ee658b477e96c017847400840229b7be713d790b5e4fda2451b52617fa22830fd","ssdeep":"384:lx1Wfl5gbnPazbj61bNocZA8BkY7K+Zq4ElTyTKjOBmBnZGSb0NeLiIvhGKkn8xD:lI5qIy5ZA8BtEypMn0MLiUs1K","tlshash":"0ac2d8cc7bb1b071437365b5802f140fb23e99aeb408ca98b288d8e16db55594637f7e","first_seen":"2026-08-26T05:08:10.642402Z","last_seen":"2026-09-20T22:48:45.208252Z","times_seen":1873,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/img/bg3.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.611Z","timestamp":1789936883611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/img/bg3.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88995\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88995,"size_decoded":89262,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"69ff45757b6e20447b2131872dc18ce6","sha1":"089ab299ca4280339284790f4f1a80eb4c4c7724","sha256":"ac71b33e3b6ff0368a3555a627981510128f559b4f5e6b95217db047bdd21eb5","sha512":"e09f7e0cee68c7a64b8a29038c4410b62dc6d071acccc802c02679bebc1e7fa486d29972cf4fa71687bdff696a3e95724f447061988e2b2c671798752bc3d899","ssdeep":"1536:SwOdIzUxAVT7/f0vTdCdsTLgDqRthUprwVJNxvctXCIDxG8fgISwchPyC:SAUyVTDf0BCdXuVUh8xGLM84Ig9","tlshash":"029312207b109ca4866c2d7781ae3e4a6b199d9e8e53bcde14b0d260d7047974b3b3ec","first_seen":"2025-04-27T11:22:47.40106Z","last_seen":"2026-09-20T20:51:24.276679Z","times_seen":177,"resource_available":false,"data":null}},"time_used":2323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2235,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/img/avatars/4.jpg","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.614Z","timestamp":1789936883614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/4.jpg HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25747\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25747,"size_decoded":26014,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 262x300, components 3","md5":"dad1660a7b0d6cd05bb526df63add1fb","sha1":"2916407e1a053f877fdd409170e9162aee64c16c","sha256":"8e812b62a5008bd1e3f8353e623ba11cda37e8700597f8254da456ca8fea681c","sha512":"694ebcfbadb7fa52af36186a000fdb228d6c75fba01b42fd6f12e3540d915d14ece4de3b8ad778e1105beba0e0bb162a068bc0eec01360dbd955aed962a46420","ssdeep":"768:WEcob5jvRkbd1pJ4Jx7NXUAR/YLFJBD2R/U:WEb5jQmrO2Rc","tlshash":"f6c2e03db6c10ce8f8217374569f3c9a31d3aa5465112896e8e6f67b30502f28f14ee6","first_seen":"2025-04-27T11:22:47.44423Z","last_seen":"2026-09-20T20:51:24.271397Z","times_seen":202,"resource_available":false,"data":null}},"time_used":2311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2256,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:25.935Z","timestamp":1789936885935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:29 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k/3X6dkJ9gBcpp+97YKqJU4g97P9s5wCujVu7jY5cljaXTytw/TgD1FTGZ9MYPVPRwjyjnA\r\nx-77-nzt-ray: fdb541239d381e411e45b06ad055810f\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 2697\r\nserver: CDN77-Turbo\r\nage: 13\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6053,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-20T21:03:16.918382Z","times_seen":9543,"resource_available":true,"data":null}},"time_used":3329,"timings":{"blocked":-1,"dns":34,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.596Z","timestamp":1789936883596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.mb.YTPlayer.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 15783\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89810,"size_decoded":16023,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606), with CRLF line terminators","md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-09-20T20:51:24.262965Z","times_seen":209,"resource_available":true,"data":null}},"time_used":2079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2048,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/js/wow.min.js","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.597Z","timestamp":1789936883597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/js/wow.min.js HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3302\r\ndate: Sun, 20 Sep 2026 20:41:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14974,"size_decoded":3541,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (482), with CRLF line terminators","md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-09-20T20:51:24.254158Z","times_seen":285,"resource_available":true,"data":null}},"time_used":2079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2064,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:26.778Z","timestamp":1789936886778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /flags/32/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ont8zDqmNgYcmL4P5gRH9lZxj32AtlcH0dEI3Byks%2B6Pi%2FV6XkgxWfzkhiTTj2y9Oms7ezWB4vNJLksn9oAJRbFvf0ymvJpuMmffUySN83KwgR7YD2wvk%2BBe4DZuXsArLP14Hg%3D%3D\"}]}\r\netag: \"63692750-33e\"\r\nexpires: Thu, 26 Aug 2027 05:27:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(89;u=4;i=?0)\r\ncf-polished: ok, orig_size=830\r\ncf-bgj: imgq:100,h2pri\r\nage: 2214849\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3e3a6a669605699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":1511,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c7d024de9ea604d5112aafc2738f21f","sha1":"19eae4ef8a7275c8cd5a6528e9c302c36feb8ac4","sha256":"529bcccc5a1659f26fe9f396a809996d064504598f145bee5abc62b94f7d1ec6","sha512":"1f2d1c7015d2b000f5b271ead4e16c3f36f049a34991d7032ee3b353ad7b1297bedcb4c75af662aa15d4b86a2f8187557d701abbdc7b32133ae1f23b9042af7f","ssdeep":"","tlshash":"670144c70d10215ccc2bcc5251eb044584a36a6a453b41ff0f2e980c56f595f5cd0305","first_seen":"2024-05-01T05:40:26Z","last_seen":"2026-09-20T21:03:16.957104Z","times_seen":2251,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/5ad1720da0dcdaab4ab517a505fd183724687d92.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.186.29.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:29.287Z","timestamp":1789936889287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/5ad1720da0dcdaab4ab517a505fd183724687d92.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c6-fxc/R0WaCQ2nLlKNaEmT2rBS1Mg\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1222,"size_decoded":883,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"774215c98394c5963e92a86970f7feb0","sha1":"7f173f47459a090da72e528d684993dab052d4c8","sha256":"4280ad1eca808818fc7819cbc538e36c11d330cb8b88e334ad250d09a9fb2df0","sha512":"99ecccfe873b1ea8ac080b9b90b24f95357ea167fc493c512b5e602ec8110ff7255c773cefd0f3e277359d101b07e41ce6ff6292f55c5d79bc84dca6addaea4a","ssdeep":"","tlshash":"bf218b7d4a6822fd5245c7d6c5047e036bacdcb371043e7de60d1a4e70db2e522364ab","first_seen":"2026-06-08T13:03:29.736581Z","last_seen":"2026-09-20T20:51:24.250423Z","times_seen":16,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":3,"connect":27,"send":0,"wait":32,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DKOWJlLK.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:32.818Z","timestamp":1789936892818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DKOWJlLK.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capitalvistatrust.com.nexorbittrade.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 20:41:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-4e9d1\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k/ohJTGRkCABt5JfCvzmry3VV40OYsSK7Y3KdZgAIvZvRV0IzuUKQ1f6eeUf68MSLpv3d/4\r\nx-77-nzt-ray: e2f75420226753432145b06af9f51231\r\nage: 475316\r\nx-77-cache: HIT\r\nx-77-age: 475282\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107702,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"1cfc843bd1f4a59fbdbd5873155bd1e5","sha1":"5f0736ed6a5a3a12496948110fa9265d39c6b175","sha256":"e7984d27930758951e5ce6f0c07dc2290082b8aef5b188faf9b5b1030a0c37aa","sha512":"7b5c5d8a3fefa7145e9d462811f8f103caa9a15d21273e0b03445ffac0599d25254e2e5849547138c02727ca242daa7f82b59da63c325661027c53e3bb5c51d3","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY3y2KQgcu5Ukxtvm3M:cOEIqXrP3nJwUr/K6vm3M","tlshash":"4d642ac57290b03543d791a6906f1109b33e5c18580d812cf269edf679baec8b2b7fb9","first_seen":"2026-09-15T08:49:00.59426Z","last_seen":"2026-09-20T20:55:55.045253Z","times_seen":177,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capitalvistatrust.com.nexorbittrade.com/temp/custom/base/css/all.min.css","fqdn":"capitalvistatrust.com.nexorbittrade.com","domain":"nexorbittrade.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capitalvistatrust.com.nexorbittrade.com/","date":"2026-09-20T20:41:23.371Z","timestamp":1789936883371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capitalvistatrust.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 08:02:12 GMT","end":"Tue, 01 Dec 2026 08:02:11 GMT"},"fingerprint":{"sha1":"2D:0B:20:A6:93:E2:9B:17:6D:1A:C0:A7:6D:1D:A0:37:CB:85:54:3A","sha256":"C9:DD:8C:55:4B:18:99:E2:42:54:68:01:04:65:7F:2A:12:AF:C5:B3:DF:7B:F8:D3:5F:B0:9F:82:82:48:E8:22"}}},"request":{"raw":"GET /temp/custom/base/css/all.min.css HTTP/1.1\r\nHost: capitalvistatrust.com.nexorbittrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capitalvistatrust.com.nexorbittrade.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjdtdnNOV2pEOGlkS21uRXJUQ1ZQK2c9PSIsInZhbHVlIjoicXlrRW1yM1RxaVc5Wm52MUFKOXlPNnBrdkt6Z251SDZtSDJUZWIwa05xWGZBdXQ2OW8zaWJRNU9zeXpIU0VwcmYxdG1UMVNydUREejZvYUpKQWZIdTJFQldEbEtadWk3WGlIeXVHWEVEa0JFTVFyOFJaK3YwbjdJaVl2dURSK3ciLCJtYWMiOiIwMDk3NmMzOWQ1NDY3ZDdhNTA1NmZmNTFjM2QyODcyYTMxOTQ3ZjRhODc5ZWQ2NmEwMTNlZjI4NDE5MTI4YzMzIiwidGFnIjoiIn0%3D; capitalvistatrust_session=eyJpdiI6IlNocWdYRE93U2U2SXZINkovTFVEekE9PSIsInZhbHVlIjoiVUFsVXpENkV2R1lSZ20wQzJyTE82RU15M0ZHUDRKY2NNbkdnWDFPUmJpVEZyd2VwUGF6d1lHaWk2NWIrOE9kcUlhVm9hSUdxOGxzcmhlQ1JlTEdwajZsZGloWmdFZzZkczZuZkZSclQvcXdQbCtSZ3ZUWmZuNVd4MDljUHliUEQiLCJtYWMiOiJlNWFjMDgzYzA5ODU5YjY5ZTBkYjIzMmY0ZDZiM2U0ODI2YjViN2JiODM1MWIzYTgxMmUxZDhiY2RhNjkwYjFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 20:41:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 07:44:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 11979\r\ndate: Sun, 20 Sep 2026 20:41:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78221,"size_decoded":12291,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"05cb650082a3fc8aa618cb48208a79ca","sha1":"cc160cd30be0f9f99541a4763a6ce7d8cd001fa3","sha256":"dee2a403938d53a47b4ea62b38c5581aff1f943b85147fc7aad5f9e53d256fa9","sha512":"b7a3124ad5ccefeb9050f8c8de6f1dd37bf758214c413cea8871d32fee16ca5009c1aa2ee945bfabf6763f9b1cf51818a9ce7657fa0dad2fcfade6d53c9a26f7","ssdeep":"1536:299xhathLHFLwXhrjU2AWFS1L0pgUrtfmz:C9xhathLHFLwXhrjU2AWFqL0WUrRmz","tlshash":"1173167cd95f10924322dae197436242fb25763efe410c4cf2a1e78d9be1226a586fcd","first_seen":"2025-04-16T16:49:09.286329Z","last_seen":"2026-09-20T20:51:24.265035Z","times_seen":189,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"capitalvistatrust.com.nexorbittrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}