{"report_id":"ba693da5-52b8-471d-a4a5-f6ae6bdc16e4","version":0,"status":"done","tags":[],"date":"2026-06-07T09:11:40Z","url":{"schema":"https","addr":"capital-turn.com","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"capital-turn.com/","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"title":"Capital-Turn - Home","dom":{"size":41824,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26309)","md5":"c0afea53216aae73dc3dd05b647e64ae","sha1":"3d83ba896c56275176b5620a7df81745e94c194c","sha256":"5e551368794867e86a4a02e0417bdba5240d7ba1645de6134374c656cd8f4554","sha512":"63958949b83198ec8b3f727c04147fd98e93d0740af995780c1ef4a182d6cc54c150f81198fd198f101808162278b6bd0d67cb354ce8186af2d141a7dbfa24e5","ssdeep":"768:0yJi2qbCmmWq38FTbfsTO+hDGqBt8UtN2v3k/SR+D/5km58:FJzqbCmmWq38FTbfsTO+hDZBt8UtAk/C","tlshash":"7e13a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"capital-turn.com","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T09:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":5,"received_data":212845,"sent_data":2811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"capital-turn.com","ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":38,"received_data":3323485,"sent_data":24140,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-06-05T00:29:13.710995Z","alert_count":0,"request_count":1,"received_data":18546,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.125.212.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-06-05T00:29:13.540832Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":631,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.185.172.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-06-05T00:13:47.466641Z","alert_count":0,"request_count":1,"received_data":1550,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":17377,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-06-05T01:46:25.30687Z","alert_count":0,"request_count":1,"received_data":7732,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-06-05T00:13:47.526263Z","alert_count":0,"request_count":4,"received_data":327908,"sent_data":1875,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80420,"data":"","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-06-20T16:02:40.427251Z","times_seen":8635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/wow.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-20T16:12:04.786564Z","times_seen":13036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d93794367ba35be129f85ebea527950","sha1":"ed8888522af746e83a22178b512239c95be7dbcf","sha256":"d891e62be4b19bc22fccc8d2626e9210d0306120ef41e9ea8bb7c688cdbcaac3","sha512":"ea57c631293cf17e2cec46f1840a6099f7f8794dee637a7e4cdfb36a53ea79864d12b9d44b9f8ec6df7c084c046bcb50ad4594142b448e6807bceead6d372ead","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4z:nYqbrKOQ/YRQp18nl4sSG+n","tlshash":"c305b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","size":859899,"data":"","first_seen":"2023-05-16T15:44:51Z","last_seen":"2026-06-20T16:14:11.36594Z","times_seen":535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/iziToast.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-06-20T13:24:01.188544Z","times_seen":2976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/slick.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-06-20T16:03:45.129038Z","times_seen":101600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DMhAckcN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"461b42090de110a050e1b50e09eba873","sha1":"e53a4b066cd244fed1101abf9c2b07924a610b98","sha256":"05431eba8e0cf029d3be77ac2e9c6e029b8e9680193940f6910c216e2c19f50a","sha512":"c9b178653713cbafbd7674173e9a0f54aa00990bcdf768fd68ffa780706675bbb42e2a7113b80ba706373a2b55231cf7d6aab1fffb559e67ffedf1210248df03","ssdeep":"6144:k8hlqO0LQZhjPGrKt38fHsIcu6Ga7U1FV:hqO0sHjP6Nvn6F7U1D","tlshash":"29443ad53294b035439b51e6906f1106f33e5c19580d812cf269ede678baec8a2f7fb8","size":271093,"data":"","first_seen":"2026-06-02T16:07:50.284567Z","last_seen":"2026-06-09T14:38:12.245075Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/jquery-3.7.1.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-20T15:43:10.357844Z","times_seen":28681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/app.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2a3bd78d541e69f82ee1e47e139d1d1","sha1":"19ebded3bba1ef05694b73db928bc386cd747580","sha256":"585d0945d47832bc90f4be2cc8b7b477cc079b0e256e353bede7e3305fb9a4d9","sha512":"8caa49dec161ea2638ea1253a4a71f2f5fbe6b612e18a52dc1cde3018071fafd3dccb51be9eac14f77fc3ee6ff7da501805574ade99945c99c83ef20ace6504e","ssdeep":"","tlshash":"c961771cb9382136847f33b791755788fbec411bc6014706b2ac4a8d2d90a9573d1cef","size":3268,"data":"","first_seen":"2025-05-15T10:50:55.681757Z","last_seen":"2026-06-07T09:12:26.383644Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-20T16:00:20.029542Z","times_seen":3543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BojhtUc_.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a11805d1bdcebd0878395b8e66aff8","sha1":"f0f13b8c51f610715ad2b75abb52ae344734c952","sha256":"b761137f727ff6e2397595601de8987e270ec4cd3ccecacafccf9743ed3fce5a","sha512":"c06d710db518448b6eeb0685f9a50c72ad45348ce8d88c474959dc52efbe8db2d724b1ecfb8f7ce2e7b223df978d55697835be61a8c6e5da2131a034a9c2565f","ssdeep":"384:HMbdaRMGZFFCAkx4ASsbkA0d7cb8J+vVEX6/YukQUAKS:HMJEXFCAk5Sjob8kvVEX6qQUAKS","tlshash":"bf72c4382700343f316f5809266df4966236e39ce55385289b2ead4d32d8cd19de3bf8","size":16275,"data":"","first_seen":"2026-06-02T16:07:50.277849Z","last_seen":"2026-06-09T14:38:12.232594Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"\nIt looks like you're using the development build of the Firebase JS SDK.\nWhen deploying Firebase apps to production, it is advisable to only import\nthe individual SDK components you intend to use.\n\nFor the CDN builds, these are available in the following manner\n(replace \u003cPACKAGE\u003e with the name of a component - i.e. auth, database, etc):\n\nhttps://www.gstatic.com/firebasejs/5.0.0/firebase-\u003cPACKAGE\u003e.js\n","filename":"https://capital-turn.com/assets/global/js/firebase/firebase-8.3.2.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/iziToast.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.766Z","timestamp":1780823468766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4784\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":5021,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-06-20T13:24:01.188544Z","times_seen":2976,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/top_investor/635e45944236a1667122580.jpeg","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.783Z","timestamp":1780823468783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/top_investor/635e45944236a1667122580.jpeg HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8926\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8926,"size_decoded":9192,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (11904), with no line terminators","md5":"ba2fdf20d1c13e676d353ff8393edb8a","sha1":"608219abd8acbbb5fe87d43d5ec2461d6cab6608","sha256":"fa1102604da3fea45a45999871d3b29dab614312983e8ca245eecbf6f01b5402","sha512":"7f94a2105a53f1024c3a4019d690fa59556241ba8a4cf40ebbe9723d48a49687fb47eb85201745b7ed82091dbc8f760827a4c459c72534e1161166afc9f07a14","ssdeep":"192:2a54OpFm55HtFxH09IgV7z/opn9sg2/cCinci87GltsxccaTrqrtfhwjY/7qL0oc:/u2FmPOegVvA0g2/c7H87u0cvTrqrtee","tlshash":"91325e24c6b39f6e44450bab5832f6d0ac38bbe095ec84ff6091a5b3f46597ac79c041","first_seen":"2026-06-07T09:11:49.942923Z","last_seen":"2026-06-07T09:12:26.346808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/testimonial/6375d0ef9a2991668665583.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.793Z","timestamp":1780823468793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6375d0ef9a2991668665583.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34853\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34853,"size_decoded":35119,"mime_type":"image/png","magic":"ASCII text, with very long lines (46472), with no line terminators","md5":"828a2322e33adb71151c10a8fcdb6237","sha1":"96a8b932483f28b486afdd65f1871b7047fbdade","sha256":"0b7dc23830abe2da62e86bee3998fcbf37df2c028e803a24b3a6a9ffe1e33041","sha512":"d6af34e0ab0342ac48a4eb72ca33e294221f03ea9e025de6e377ea2e5ac3638733bdf5e7c9d99af119652947d864ef902aa5019be5e9a2ac7ec57064fc3a32f6","ssdeep":"768:lzn8koq2hREXr73bLW+JFcjrigipfmROP+a4N55/GFHf8hOU/ja/U:l2VhR+n3bLWk+r/ab4Nj/GB8EKjac","tlshash":"bf2302901b35e78890a9abd050b11a11bed8d79e9c406c27bff231d74dd328b1b74af1","first_seen":"2026-06-07T09:11:49.943982Z","last_seen":"2026-06-07T09:12:26.355992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/webfonts/fa-regular-400.woff2","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.335Z","timestamp":1780823469335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25452\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25452,"size_decoded":25719,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (33936), with no line terminators","md5":"14aac78e2f471d4463bde7662005f337","sha1":"516d11aa27cc12a2e8d9bc235ed000af9b95249d","sha256":"b8dd0e248bccf8eabb57184b5b75af46ff607bfa4a4b29e197ab2b8a29662739","sha512":"6ab5a239e77a59948aae26042ff8d5bbb530d4fbca91f3589b98ced2e8ea0f828b32101c48a3ed06651f1b04166e4695624aedd08dd6a89b2fe64e8aca468534","ssdeep":"768:VB2602/2HzG+vo5TfSOHWYIrd361DxQ9IsKD1DDmelg5VGVbke0:y60NTG+vokOHa36XYZK5ZIEVbke0","tlshash":"44e2f2fad31dfb920cc22a6c1b3580d59ae71a1ac99179cd9ca116dcc78ef901a1c9f1","first_seen":"2026-05-25T18:28:23.993243Z","last_seen":"2026-06-07T19:11:52.706334Z","times_seen":20,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/css/bootstrap.min.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.728Z","timestamp":1780823468728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24629\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":194900,"size_decoded":25117,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"a535cda6f21335f130c892d0444a7902","sha1":"95c895180f4103e47281f2dc59524adc05b22dcf","sha256":"ef110c50e64cb77ff4adcec1cff87821f8bb31e56ccf14d85a8bcce0eb65e19e","sha512":"bf30a7e68070b7617a7fc9d84bf73512dc00f48625e23d092493889fe912ec53e42297e1e903b3880e088d5c8089d8648c3bfb85fa5d2a3907d35c72a10c3a1e","ssdeep":"1536:htGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:htGg9JfWD9kVkpz600I4lp","tlshash":"711482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-06-18T01:05:12Z","last_seen":"2026-06-20T13:59:39.454184Z","times_seen":645,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/jquery-3.7.1.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.751Z","timestamp":1780823468751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29737\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87532,"size_decoded":29975,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-20T15:43:10.357844Z","times_seen":28681,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/app.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.759Z","timestamp":1780823468759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/js/app.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 979\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3268,"size_decoded":1215,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3546), with no line terminators","md5":"257bb93153579005f810e2a76d6c94f8","sha1":"cc86fb2185d993a6e846f8b2b73265ba12811f9f","sha256":"87d238b801ab80b7f19f60f8a23309cf2e291b09e0403e099c92b8ea05774715","sha512":"222689c80a239685e4407eeaa080d97bfdda03596907ee88fb3fd49aa2b6407b177cb4ced68dd22979ced89f970e980766b2a973672a7d0e334c8e7fe8b0f11a","ssdeep":"","tlshash":"9e710e2c7d3c313a4c6f24bba4e6c7d9255f200f864102172f5c4d9dd9c2a5ab6d1cab","first_seen":"2026-06-07T09:11:49.947043Z","last_seen":"2026-06-07T09:12:26.377675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/top_investor/635e45a5ee2921667122597.jpeg","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.786Z","timestamp":1780823468786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/top_investor/635e45a5ee2921667122597.jpeg HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16055\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16055,"size_decoded":16322,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (21408), with no line terminators","md5":"4e977129279d46955dee6920d0e864c3","sha1":"e7b75044f159e8765a81c2b557a0b527e41bb6d5","sha256":"4dce76e4dd72aafc84dc5281ed08988d2b7cb74943a65677a74490a5c495ddd0","sha512":"9e6f073a18f8dd1b205b361fc0e74b16d0d28241c914008786a35f00f40c0579ba2cd98bc8e9b281ebcde7bf063d6a44e7921687687248096aaf1ccecc368414","ssdeep":"384:/u2FmANnB75Ffppj/+PSqHRcMVlH/Nl9pFFL+6XI/J369MNUrPGOBwam8gwbo6u:/TmIBtFxproSqHRfLpFoue3tUDu8gwkJ","tlshash":"d2a2d0a7c7f3de11c9119092540f22c17c6bf2a1a293e2ef26146df6713ceab566f910","first_seen":"2026-06-07T09:11:49.948173Z","last_seen":"2026-06-07T09:12:26.349276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.486Z","timestamp":1780823469486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:16 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69cac7a9-4668\"\r\nexpires: Mon, 30 Mar 2026 19:03:15 GMT\r\nlast-modified: Mon, 30 Mar 2026 18:57:45 GMT\r\nx-77-nzt: k87uZXnMv9f/fB/4T8qWfHdJwUkMbWCBjG/4FWGrr7SD6qQFjtXlJN4vbN1XcRnaxAkHdLQ\r\nx-77-nzt-ray: fdb5412323cb1331b435256a9a57460a\r\nx-77-cache: HIT\r\nx-77-age: 3\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6041,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-06-20T16:00:20.029542Z","times_seen":3543,"resource_available":true,"data":null}},"time_used":6690,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":9,"receive":0,"ssl":6642},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DMhAckcN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:20.138Z","timestamp":1780823480138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-DMhAckcN.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:20 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a1ec789-422f5\"\r\nexpires: Wed, 02 Jun 2027 12:10:40 GMT\r\nlast-modified: Tue, 02 Jun 2026 12:07:37 GMT\r\nx-77-nzt: k57h8b+SNmH1TPftayVk/b3uYRsWpr1bgkIxpVMudj6UfMl1aQecC9brRhAeG0i3j7AVOCY\r\nx-77-nzt-ray: c1fb9819383fbef6b835256a12487908\r\nx-77-cache: HIT\r\nx-77-age: 421208\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: copenhagenDK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":271093,"size_decoded":92218,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44711)","md5":"461b42090de110a050e1b50e09eba873","sha1":"e53a4b066cd244fed1101abf9c2b07924a610b98","sha256":"05431eba8e0cf029d3be77ac2e9c6e029b8e9680193940f6910c216e2c19f50a","sha512":"c9b178653713cbafbd7674173e9a0f54aa00990bcdf768fd68ffa780706675bbb42e2a7113b80ba706373a2b55231cf7d6aab1fffb559e67ffedf1210248df03","ssdeep":"6144:k8hlqO0LQZhjPGrKt38fHsIcu6Ga7U1FV:hqO0sHjP6Nvn6F7U1D","tlshash":"29443ad53294b035439b51e6906f1106f33e5c19580d812cf269ede678baec8a2f7fb8","first_seen":"2026-06-02T16:07:50.284567Z","last_seen":"2026-06-09T14:38:12.245075Z","times_seen":231,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.125.212.45","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:20.405Z","timestamp":1780823480405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://capital-turn.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1IBFunfprsOgmMDg9pw5iQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 07 Jun 2026 09:11:20 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: YvTl4aW7dZnPxGHHQ4Q4LORRnR8=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"9d4568c009d203ab10e33ea9953a0264","sha1":"dd29ecf524b030a65261e3059c48ab9e1ecb2585","sha256":"12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126","sha512":"64d24560970ca14d349bea0e7d2526d4754bf3283568ab4dd602bd79eb454dc3657d5bb6f9a30c90ea98d9600ebd0fb45d582f4cae3f8e3c50b0e8fb18059892","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","first_seen":"2023-03-09T21:44:55Z","last_seen":"2026-06-20T15:56:39.492649Z","times_seen":23786,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":0,"dns":376,"connect":384,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/css/line-awesome.min.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.737Z","timestamp":1780823468737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15174\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89729,"size_decoded":15484,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-06-20T13:24:01.214807Z","times_seen":6955,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/css/color.php?color=ACE600\u0026secondColor=20204E","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.747Z","timestamp":1780823468747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/css/color.php?color=ACE600\u0026secondColor=20204E HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.27\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-length: 1095\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4548,"size_decoded":1376,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4706), with no line terminators","md5":"f9a6d03bdbb369728b46ec818424cd81","sha1":"2727bc6657f39876919178b951e3ce7cd112b46c","sha256":"73439a41748c5524695cefeab65e181a21cc03eeb16134f9c2a101cba0ddc4d9","sha512":"28d41b90632e0b7fd2f14846d31fd60921a6776a546a09a6574aa1bb2c325ab85e23899753ba7a7c1449f733e5dcbdabe41780dc7d721986ee46d56efa46a6cc","ssdeep":"96:VkyhRhIie03RT0kk1MLT3CaaDnBweSTIojAz3yxT1tQN:VkmRhfl3RT0PiLT3CaaDnBweSkojAz3D","tlshash":"f1a122f9bdce203922a68dbe757f5734473f6d50c1080bf6736d15684a980e8da1710d","first_seen":"2026-06-07T09:11:49.951501Z","last_seen":"2026-06-07T09:12:26.354263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/wow.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.756Z","timestamp":1780823468756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/js/wow.min.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":2809,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8517), with no line terminators","md5":"83e768daaacdbe9c3c146b7cc74da32f","sha1":"fc674ddeef206c9e9e93b48cf34fb93cd21dc932","sha256":"c28529c5bf48825749812b2b7487af8eadb6438ca36ed612a3ea7f3dcd8ae028","sha512":"17254b383cf481c3a6cff48081c74a3bc262d12cc4fd6bebe0881e73142c429249fb39662c0c23a7167c445cb37f7baf758187ce5b7e0787d73c4ebf3117cebd","ssdeep":"96:irZ21xnP7eGqK+PrR6TydCHFMLvA0pa/rUcqzGSiM0/ImBaZbd:ir01P7bAzbAn/rBq6SiN/ILf","tlshash":"120276c97a967031c75795f6833f0505b6361aee7028047cb5a88de87d78868523bf38","first_seen":"2026-05-25T19:09:43.070058Z","last_seen":"2026-06-07T19:06:00.749297Z","times_seen":22,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/ac32a8946fb4514a723266fa77e29de92af994e5.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.185.172.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:16.242Z","timestamp":1780823476242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/ac32a8946fb4514a723266fa77e29de92af994e5.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4aa-AHvOoAedc9Ga9sKroAnh39UhoTk\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1194,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (1320), with no line terminators","md5":"2ba3986e157c14cfe06983ec619b199d","sha1":"fe31fb3b06f76c9b4921504402022a0b4c07ca99","sha256":"1dbad063bae0804280a675bc66149a3fea66731a83239d07e41440f07f6000c5","sha512":"dfb9f7181c466a146c87ad03c4e0c5e4c2702b989357458cf523a765ab4731d069c79b81f3f4e9241f0bbe85a168e6f78cc0d1ef417ea2715973847ab3b85390","ssdeep":"","tlshash":"14217b68995ce22f8141ca5dcf3c3e322a5d487968113c3ae7dc510e60f71793a228a7","first_seen":"2026-06-07T09:11:49.953075Z","last_seen":"2026-06-07T09:34:34.30149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":0,"dns":5,"connect":22,"send":0,"wait":42,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-_SIWlSKO.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:20.140Z","timestamp":1780823480140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-_SIWlSKO.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:20 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a1ec789-8d1a\"\r\nexpires: Wed, 02 Jun 2027 12:10:40 GMT\r\nlast-modified: Tue, 02 Jun 2026 12:07:37 GMT\r\nx-77-nzt: k5FGnxO9oPe3TWG6CEr1hIUAzDqVwLCxvaIB9oKf5QxUmeXCkB9Q+6PYVt1FmVHxgv7hD48\r\nx-77-nzt-ray: c1fb9819383fbef6b835256acf718c08\r\nx-77-cache: HIT\r\nx-77-age: 421208\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: copenhagenDK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36122,"size_decoded":8187,"mime_type":"text/css","magic":"ASCII text, with very long lines (36109)","md5":"fba01d69ab5f7bafd74fb7d7f4ad2361","sha1":"f1417ce974ac98da32d6884a37c6a23ecd68ab8a","sha256":"d8446e9ec2179df2c42beb2fa396744abca3cc3314985a1f3d17e60b232a0999","sha512":"42f3d4023a3f9d6dfdf8948b1f82cee899de7bd7298d20e2367e385566fb51262c3c9f7db390104c9038be714c37430912c021c8a79e4bd22db1ffb62f620222","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+sZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XAcrNSN56DwQ43","tlshash":"66f2966daad9093dac23c179e3f8e58c912af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-06-02T16:07:50.389539Z","last_seen":"2026-06-20T16:00:20.148659Z","times_seen":541,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/css/slick.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.744Z","timestamp":1780823468744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/css/slick.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":791,"mime_type":"text/css","magic":"ASCII text, with very long lines (1897), with no line terminators","md5":"e51596b51f7e6b524e54b0fb615fbd6a","sha1":"b9d35038b0adeb58dbff973e9ec9c2f813ad6eec","sha256":"add76d6787cb7937487d11fb8ae31eed2203b911a2b439850f8c3613b157b42b","sha512":"50793bfdc2613cf9407c8deeb94ffdf0672c54fb7700c70dff36e75bd88d62a02925285e338d4705b0ed9a5c98b2630a6f48e1c14812ff7872da44a50fe54f11","ssdeep":"","tlshash":"2041185c39618439ac238eacbfe7867565ebf0118c3511497b8c4346878faa8cdc9776","first_seen":"2026-05-25T17:48:06.327298Z","last_seen":"2026-06-07T19:17:42.792811Z","times_seen":108,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.753Z","timestamp":1780823468753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22476\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80420,"size_decoded":22714,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-06-20T16:02:40.427251Z","times_seen":8635,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/js/slick.min.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.760Z","timestamp":1780823468760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/js/slick.min.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":10335,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-06-20T16:03:45.129038Z","times_seen":101600,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/js/firebase/firebase-8.3.2.js","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.768Z","timestamp":1780823468768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/js/firebase/firebase-8.3.2.js HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 238464\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":859899,"size_decoded":238703,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"7d93794367ba35be129f85ebea527950","sha1":"ed8888522af746e83a22178b512239c95be7dbcf","sha256":"d891e62be4b19bc22fccc8d2626e9210d0306120ef41e9ea8bb7c688cdbcaac3","sha512":"ea57c631293cf17e2cec46f1840a6099f7f8794dee637a7e4cdfb36a53ea79864d12b9d44b9f8ec6df7c084c046bcb50ad4594142b448e6807bceead6d372ead","ssdeep":"6144:K8YqbosMLHtk4OLs/8wWaoFwApF+GzJXZaGQqdxQUdcujbva18nsLDMX4teWXs4z:nYqbrKOQ/YRQp18nl4sSG+n","tlshash":"c305b5ccb692b062439360b5507f410bf33b685da40e40acf669e9d67cb954e923bf78","first_seen":"2023-05-16T15:44:51Z","last_seen":"2026-06-20T16:14:11.36594Z","times_seen":535,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/about/635a2d306e8e41666854192.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.781Z","timestamp":1780823468781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/about/635a2d306e8e41666854192.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119831\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119831,"size_decoded":120098,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1b6e48ae2e11e2090e10fc29d080d658","sha1":"e23b74aa0bc93af37eaf9a3d1ec47d8aa21c43c9","sha256":"b937d669e41d54031400106e8410550749a77f08d3dd56d8e2c1954e4a01b113","sha512":"e6d88d9fdaf882ca107465cbdfb9b75acfeda3ca7955ee9fc0d6a028a4f08eb71b33c80ca6b8226b6f463aec9b6937ee4e01a6a0251bdeaf07384e82bf9ee364","ssdeep":"3072:c13LUQ/g9F3Sr782jbrX/tmvs31UxWXKtpRgvY6R6eWoxt6jr:cahirwQEW1UUDvY6R6Zjr","tlshash":"b4f312927c4ef6d1121cc10e19aa1fff7aa66d93260c732037dc789a9d6af182136535","first_seen":"2026-06-07T09:11:49.956922Z","last_seen":"2026-06-07T09:12:26.355391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/top_investor/635e45ae137bf1667122606.jpeg","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.787Z","timestamp":1780823468787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/top_investor/635e45ae137bf1667122606.jpeg HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11286\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11286,"size_decoded":11553,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (15048), with no line terminators","md5":"c8725339bf8f625f6edb6e154ebad697","sha1":"b09375074841552951abe02b96527354e5654fff","sha256":"6b99c000db5ded0c6a1fabfc89cd47a2c697c94883f7b5be9e41627a5b632308","sha512":"30edb98356d84b0731c60b4773d2c2bfe02536b344eb61f414ad301cafc376b62a1851db305a403ce7f5333d6c49ed93ce2865bb1cf7731d83362f08cc0c224d","ssdeep":"384:/u2FmDj8FnA77zeEOTCJobmv/1RGlcFvVHtkb7EJQS5ZnnS0B:/TmDj8K5ebmH1glcFvV27U5ZV","tlshash":"f462c171bd763a55cb4345a6c83ae01fb9f8671de51906d8c80a454ec4fea06198d0c7","first_seen":"2026-06-07T09:11:49.957932Z","last_seen":"2026-06-07T09:12:26.347503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo+2:wght@400;500;700\u0026family=Roboto:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.139Z","timestamp":1780823469139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Exo+2:wght@400;500;700\u0026family=Roboto:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Jun 2026 09:11:09 GMT\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16693,"size_decoded":2448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a89ea23fbda922754c912187feb4a4c5","sha1":"1db46797f4d6a856fded491ee3cc915a34e53b3a","sha256":"ef5e5b47de626cddb6297cebebca0d87cdb367877d144f11dc9fc4a60a776846","sha512":"d498e45f826cb3e293cbba8a41e481147ba0c3ea5cd7ad95e6b29764b52bf2d5eaf8ed7af1ce27a849c8ef25673d2ec6615797901acb970199448cbd71023507","ssdeep":"384:1lTeUQ89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m9q:VyjooYhREHPM5svvYaR7AI8","tlshash":"d97231a104178400db834cd623ce7f3afe5f62117041d0b9abfd5aaaaddbca2536935d","first_seen":"2026-06-07T09:11:49.959019Z","last_seen":"2026-06-07T09:12:26.376143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.325Z","timestamp":1780823469325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 04 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255211\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (57516), with no line terminators","md5":"64575b7d92820779993c9df68325aa7d","sha1":"4f220b2919a31ad150a89b4c88edf9339d966ee0","sha256":"2194a2a0e609b3a24485ba97babdb360930ca8aa3700423ad6f3d5913270a15a","sha512":"dea9b95ca1ddea582ab1b84d302d5128938f236fb1cb9da76b2cd62e072a0f24b60258e107d284f93d3f8f33ca13f62e459ed541ffc136710eacb034b291efcc","ssdeep":"1536:JA7I/ZzZeu6FC/L4O6NTGt9mVf7Ma1Ej3Oblx4iueYV9:+7IBz/6FCj4O6NTGnS7XEY/4H9","tlshash":"2943f1a6b3a94e09c897c1a79b7de3cdc2548106c71a7057aeb490c245eb57cf2682ce","first_seen":"2026-05-25T14:46:18.034217Z","last_seen":"2026-06-07T19:22:09.833366Z","times_seen":871,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":19,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/logo_icon/logo.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.776Z","timestamp":1780823468776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 15:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 261058\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":261058,"size_decoded":261325,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df6f3b46eab85880205c154d4ed6e2dc","sha1":"b46abbd05a3f2f78c191c9a7e27914820e44458f","sha256":"988ed3ab69cc69a4a3b48fe8d6e4cc91246317da8901a2c95008a39605e107a5","sha512":"4326e049598295577229cda078d9fbb4ab719f630fb32a87b2ddc8253605f24988c2e774dc18d85a06e53b3eec7cb3c842c6af8906e27b5b534e6f6d75739526","ssdeep":"6144:ORPbc1YBoH2xYGvBJER+e/hEuwdnewGSrQz0UOTCwDtjZnjLKR:OR6YcAvjkhEZdp5vT9DpZnQ","tlshash":"ef7412716e8c785ea70aff2315713b2c2e6226e700dee4dd31a422d1254d9734aa7fe1","first_seen":"2026-06-07T09:11:49.960975Z","last_seen":"2026-06-07T09:12:26.33614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/top_investor/635e45c06f8131667122624.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.785Z","timestamp":1780823468785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/top_investor/635e45c06f8131667122624.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12494\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12494,"size_decoded":12760,"mime_type":"image/png","magic":"ASCII text, with very long lines (16660), with no line terminators","md5":"b93b56e996a5b030972562d4c57daa4e","sha1":"b92db7e5cf70e5987304eb0f8464318bfe205ca7","sha256":"6441da605f99611d00cfed4fbcfb3b2ebd01ec061511bce60e6032bdebd4462a","sha512":"f929d07570cb70c6170c4a0afadf05d7feb0b43e0ea41e2716010864403c549513e66ead64f7629b8c52ef48960cea5c9072a758a428146ae5d18d53a9255fa5","ssdeep":"384:fJNrbGqIdUOpjix8S9sUqmpxlTsLeIMEJQCO8dfgBkbpob6tp5uipCBk:RtbGBix8SOU7la8EJPODkbbPuiCk","tlshash":"1f72c1b0c4be7e3e23a7b560c9f1314ae17209d3bf04bfe58304d2e15952a42e796824","first_seen":"2026-06-07T09:11:49.961892Z","last_seen":"2026-06-07T09:12:26.382496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/testimonial/6375d0dcebcd51668665564.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.789Z","timestamp":1780823468789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6375d0dcebcd51668665564.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34034\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34034,"size_decoded":34300,"mime_type":"image/png","magic":"ASCII text, with very long lines (45380), with no line terminators","md5":"9716ff204eede316404a8c75253e6e8b","sha1":"15e2e6c4448b8bf606f326932c8522d50946e470","sha256":"78ab6c896988aca8ee298fba2584afc0938458cc915db513a34bfef23dfdefb0","sha512":"8fc1784f1b43543c0702a81a3c84ec7066926e7ef9f0c30bcf21051a17de5a904c1b686ad78b045fd2220da6bc59369b5e99b4367eb77c058c23bae92e7719c3","ssdeep":"768:HtKEwdhYtSVnTe8y0IHU4DCWTyED2MXiFrxaiAzp7LH/VgZx8Nfbx6pTSnVzwI3w:H8EwdOwk8yt04uAyEa0+rk3z5HiP8Nfs","tlshash":"b813f141db046c486a759d052f1e823dff44c97b028dfed51bb93e1f52a6f178126287","first_seen":"2026-06-07T09:11:49.96283Z","last_seen":"2026-06-07T09:12:26.337029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/fonts/la-solid-900.woff2","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.328Z","timestamp":1780823469328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96752\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96752,"size_decoded":97019,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f4e4863bd8684320ca59329adba53858","sha1":"74f8b7924f4559aa3f4acc83d7225fa2d423b9b2","sha256":"1a829d7d80f06d30352a979e50fe0e7fef6d70cbce64107703ed6ee0d69b3284","sha512":"a243f70e577effee8160d1f59fe1baeb89af46ce7c3e1ce14d6bd1558278aef2e4d5bda5f496c6e574d11f4fcc895d7e2244aaf1c02d8ea631e051fd0e5dac6f","ssdeep":"3072:cuJV3Ueeju6krZhSKTQ7csS2kh1jtxi8kWakOk1Ahkzu:c+V3UeeFEZhSSQK7jziyZi","tlshash":"a1c3123042cdf507a44a41b8e55be9185f212eeb401af7e6d7e9e0e3bf70c21126e5d6","first_seen":"2026-06-03T20:02:22.873552Z","last_seen":"2026-06-07T18:49:50.080599Z","times_seen":16,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.331Z","timestamp":1780823469331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:07:14 GMT\r\nexpires: Mon, 31 May 2027 15:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583435\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (54448), with no line terminators","md5":"d2f7a10984c48f90b83cfab6d1399053","sha1":"b1c12ff1d781995a0007b11661f9e3052c1f1147","sha256":"c1ba658aac475f54451f4f9494c05918b699ed68ef9c80fb3972ea0853637bed","sha512":"bab5b579c7a1a2623011521915fc76514ee4de95fbf1aaa32f2e091ab6f14624e1c32bc654bf4ea824f25302179b367e19f632157c8403f3a0d91cd8965ea81b","ssdeep":"1536:zjgcSmzkPSk/Qx36SNZnnGWOAK91t7VENcOXha1:1dkPA6SNwL9GVI","tlshash":"f733023bade4b37d47affc30e875a1ab14004fd3d4c4276a0e2a97a399d4006770a45c","first_seen":"2026-05-25T19:42:35.479716Z","last_seen":"2026-06-07T17:55:12.420693Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":42,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/webfonts/fa-solid-900.woff2","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.332Z","timestamp":1780823469332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 156496\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":156496,"size_decoded":156764,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"175c1a739d1566d0a848f84261c8c74b","sha1":"8137045564b917f64b96d054693236b1288e9779","sha256":"74e3aff288f257aecbcd78f35acfb496d48f4fa065c9867cc99cff83dc168831","sha512":"1e55dd90c7f6fc76e932f2b3600db9cb6ef7d16d953794f43bcf61befae36ab7dd58d7015e1621b42c714e420a6f551ac01bb9837eabc73f81f8593693a2c24e","ssdeep":"6144:fu8KzPU5tA7AaaSYezGVRM6G6dqkqqG8quBhd5Y/NnAtHAV4r9:f3KzPUfA789ezGV66Goq3yquBhdJtgV8","tlshash":"cf142325a83e93bd1d74877ba26edfa648703fac0959a0d82f255d5b1332ad338075cc","first_seen":"2026-05-25T17:50:02.345348Z","last_seen":"2026-06-07T19:20:48.955056Z","times_seen":96,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.333Z","timestamp":1780823469333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:07:14 GMT\r\nexpires: Mon, 31 May 2027 15:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583435\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (54448), with no line terminators","md5":"d2f7a10984c48f90b83cfab6d1399053","sha1":"b1c12ff1d781995a0007b11661f9e3052c1f1147","sha256":"c1ba658aac475f54451f4f9494c05918b699ed68ef9c80fb3972ea0853637bed","sha512":"bab5b579c7a1a2623011521915fc76514ee4de95fbf1aaa32f2e091ab6f14624e1c32bc654bf4ea824f25302179b367e19f632157c8403f3a0d91cd8965ea81b","ssdeep":"1536:zjgcSmzkPSk/Qx36SNZnnGWOAK91t7VENcOXha1:1dkPA6SNwL9GVI","tlshash":"f733023bade4b37d47affc30e875a1ab14004fd3d4c4276a0e2a97a399d4006770a45c","first_seen":"2026-05-25T19:42:35.479716Z","last_seen":"2026-06-07T17:55:12.420693Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":36,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:16.682Z","timestamp":1780823476682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:20 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a1ec789-891\"\r\nexpires: Tue, 02 Jun 2026 12:15:41 GMT\r\nlast-modified: Tue, 02 Jun 2026 12:07:37 GMT\r\nx-77-nzt: k/O3XMFgsRk/lNmYq2CowYTyhzUxOO+F5VAl1LUHJCe1L1AglaBBj8EYjeB2UXg9uxopX/8\r\nx-77-nzt-ray: c1fb9819383fbef6b835256ab922e505\r\nx-77-cache: HIT\r\nx-77-age: 39\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: copenhagenDK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1031,"mime_type":"application/json","magic":"ASCII text, with very long lines (2409), with no line terminators","md5":"e1e1a5bd5746794255ce49832685381b","sha1":"13e0422f8ed0567d2537f31de3a151dc631c9f3c","sha256":"4faa24b7bbd1a1e1858c10d5f40fb5e85c62525fd7ab237020e5429c41ecae71","sha512":"dbbf008a3e9bff41824be2f9acefaad8975de7feb931a6c770ae6b4818264b7a7da708deb63eede572fa65b0efa87e25c44fc5585e6540d7d5ae07cf12b61903","ssdeep":"","tlshash":"91412887c0b80e33279c143bb85a9d626dc8b7c5a0a9999d756ddbaf134ed7400c1e6c","first_seen":"2026-06-06T14:32:20.193029Z","last_seen":"2026-06-07T19:17:46.043687Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3426,"timings":{"blocked":0,"dns":3,"connect":13,"send":0,"wait":13,"receive":0,"ssl":3397},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/testimonial/6375d0e56cc611668665573.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.790Z","timestamp":1780823468790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6375d0e56cc611668665573.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33703\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33703,"size_decoded":33969,"mime_type":"image/png","magic":"ASCII text, with very long lines (44940), with no line terminators","md5":"400bcfc0d4e51157095d0e2bdfd96a8b","sha1":"281aacfc957f0b303af6a45b8b3805f8b0386593","sha256":"d85c8801336970ada94ccbb295c29f381fb2eed4845d0c70fc0082ed970acf95","sha512":"7be058add0b14c46299cbd72966dd94dd1021e9945999656197312544c8d7935cdb3f0c38c8e0a882d959e1be7d34924ba427e3b81705ed262b80cd80389ad1e","ssdeep":"768:/x4pVtjXD6fgtFo3jMRysIL1BewdPBMwThBXmIuAD+I6Ocd8HWJv+LuNQINWMYzA:/x4pVt7BtFoYEL/ewtFrWRAu+SNQIQqj","tlshash":"3c13016783a9bb15584bb46f58ff336eed21da00f279c0310648f2753f322615b266b9","first_seen":"2026-06-07T09:11:49.966351Z","last_seen":"2026-06-07T09:12:26.349862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/testimonial/6375d0ea7b94d1668665578.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.791Z","timestamp":1780823468791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6375d0ea7b94d1668665578.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34618\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34618,"size_decoded":34884,"mime_type":"image/png","magic":"ASCII text, with very long lines (46160), with no line terminators","md5":"88a41ef3323b97a86b584ab280588be0","sha1":"7c5e69dafdb4afa1533babf33951b11bd7fa2636","sha256":"ca8bc1e0aa6df146401134b3f832a29293a70c0dd5f69e77291553fc3bcb6cb3","sha512":"af88b133c2f4a56b146da11ad0be3010232da079ed21e3bbc8185039720de86ae7c6e0d23d1bbc8c553c595fd031a80b087017b18a358f8608b30c8268030878","ssdeep":"768:4u/R274UrHAvwDykUhOmkdK93YqgunrZz+PSMaFUWtHm09Ss+p3n/a7VRJLG/yC:l/yPOOmCMYWlPMRMnS9A3G/T","tlshash":"e723f24b38127ea16621877525117387c7fcaf3eaa3cda1e00e0a7533f696347be5818","first_seen":"2026-06-07T09:11:49.967228Z","last_seen":"2026-06-07T09:12:26.350495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/webfonts/fa-brands-400.woff2","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.337Z","timestamp":1780823469337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 117372\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117372,"size_decoded":117640,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5bf17056a99249438b121cae11d2b723","sha1":"b19c5bd6c7029496b71e63974a22aa644c10096d","sha256":"41bf1480db9fd4ab5d7d44130430082b16e46fcd482c83874e1c4d40992773e3","sha512":"b9c463fee10a2daf7ba2badeb7eba88968dfa6b1c36245a8d363c94bea04f78bae1fbf47027b7184dd3246d54f1e9c3e600f1c542e9183d14f2acfe8ef88983c","ssdeep":"3072:cYCx/6qHpOydYc+j2WRxITjh8lukZQI4LHszfVAzpBuIevr+LEPbD4b:cO6Oydnx3ClALMuaz+LEPbD4b","tlshash":"b9e31232de6be26abb7cd934727dd784bfeb0791e81086c8770c54db162271212a6712","first_seen":"2026-05-25T17:50:02.254679Z","last_seen":"2026-06-07T19:20:48.952415Z","times_seen":60,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/fonts/la-brands-400.woff2","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.339Z","timestamp":1780823469339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/fonts/la-brands-400.woff2 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84772\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84772,"size_decoded":85039,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"020fe8b3a6ecf053a9dde7e601a668f1","sha1":"0edcde9537d8fb223ebe32aab1c5b321bbd11571","sha256":"fedb69af8e8150cc04f14f692dbf51a4e00b3432d717772b7d57db9f822eb1f4","sha512":"02115b49170756dd2ef7889d043aad1ced53115bd6fae4e0dd8518a624fb7607a92bc2dd4261f64d46d5ced0acc3306d952e1dcddb9140b88148a99d7f83808e","ssdeep":"3072:SWtEmkAl8rGwtW2PBHVqgsD1JWO0Z1tNY:LGqlCtblVqg61JWfz0","tlshash":"0bb31206acc718efdba9cc22a887093cb75bd0234e56f79784ca8b0f9640d995747639","first_seen":"2026-06-03T19:15:25.137015Z","last_seen":"2026-06-07T17:58:12.56397Z","times_seen":7,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BojhtUc_.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"121.127.45.82","port":443,"asn":60068,"as":"Datacamp Limited","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:20.136Z","timestamp":1780823480136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-BojhtUc_.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:20 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a1ec789-3f93\"\r\nexpires: Wed, 02 Jun 2027 12:10:36 GMT\r\nlast-modified: Tue, 02 Jun 2026 12:07:37 GMT\r\nx-77-nzt: k+Lg9LId4Wrn3NbF3KYAJNZCMECFdndGqqV7O9x5qLVJApEQvB5OA9f3sbFKnCUqcMk4JmU\r\nx-77-nzt-ray: c1fb9819383fbef6b835256ab9d65808\r\nx-77-cache: HIT\r\nx-77-age: 421208\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: copenhagenDK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16275,"size_decoded":6848,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15867)","md5":"b8a11805d1bdcebd0878395b8e66aff8","sha1":"f0f13b8c51f610715ad2b75abb52ae344734c952","sha256":"b761137f727ff6e2397595601de8987e270ec4cd3ccecacafccf9743ed3fce5a","sha512":"c06d710db518448b6eeb0685f9a50c72ad45348ce8d88c474959dc52efbe8db2d724b1ecfb8f7ce2e7b223df978d55697835be61a8c6e5da2131a034a9c2565f","ssdeep":"384:HMbdaRMGZFFCAkx4ASsbkA0d7cb8J+vVEX6/YukQUAKS:HMJEXFCAk5Sjob8kvVEX6qQUAKS","tlshash":"bf72c4382700343f316f5809266df4966236e39ce55385289b2ead4d32d8cd19de3bf8","first_seen":"2026-06-02T16:07:50.277849Z","last_seen":"2026-06-09T14:38:12.232594Z","times_seen":233,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T09:11:07.468Z","timestamp":1780823467468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.27\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; expires=Sun, 07 Jun 2026 11:11:08 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncapital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl; expires=Sun, 07 Jun 2026 11:11:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 13211\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":97917,"size_decoded":13951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (945), with CRLF, LF line terminators","md5":"cb67dfd8efd6d336e541790a8d4d702a","sha1":"e153389a6304da66d001bbece8fcaf660bc2d5c1","sha256":"b7833531c5e9fdee41440998072bf9a12a64426e7ffc967f7238de1ce0100173","sha512":"cb7e7a85728e0174e795737cf88d6ba95dab41a6722734a7d7685b38be18fe9943acd0d78f476789ac8b7dcc77aba99869a8ae47ccc219139f69ea95f63ff3ef","ssdeep":"768:1RIqopb2X5YKEEHTJSrBG8OJXhJ4CQcmFavpYW:BX5YKEEJS1aktPFavpYW","tlshash":"28a34e2164f6217712a3d0e66a616f0bafa1d117ca0b560072fd0be85fe7ce2e94335d","first_seen":"2026-06-07T09:11:49.97011Z","last_seen":"2026-06-07T09:11:49.97011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":239,"connect":91,"send":0,"wait":478,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/css/main.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.740Z","timestamp":1780823468740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/css/main.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10207\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79602,"size_decoded":10517,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"3c65aca9ea0a418dbd530bb1729d2443","sha1":"694bff749a0e7a339ddecf5d63d60b87e197ddb3","sha256":"177ccf56c35292eeab2250a5205fabe77a69c3ad7674b44bff87b833a4e4cc26","sha512":"7c3317388a153fcc965fde3efe69bd5a0ffba0c65f0fd98712d2b17695a27e66c7b5bdc8f5d712bb3792be944d4f6e0e5b3f46d9847fd6462d48c5ece178836f","ssdeep":"1536:g7UwKrbeZyUwKrWWYUwKrwUwKrQGkTJUwKr0UwKr1y2paRIfeUwKrMUwKrkIUwKv:g7UwKrbBUwKraUwKrwUwKr6TJUwKr0Ue","tlshash":"cb7330a959f70444302bc40c5befcfd4337ca183451acd6db7ce368a8f896ec59a5a89","first_seen":"2025-05-15T10:50:55.644981Z","last_seen":"2026-06-07T09:12:26.374985Z","times_seen":5,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/css/custom.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.742Z","timestamp":1780823468742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/css/custom.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3282\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16799,"size_decoded":3591,"mime_type":"text/css","magic":"ASCII text","md5":"7e2d29908744aa7ef9eac1a1607bcaf1","sha1":"759fc0839df5115e4002b998889083037886b0b3","sha256":"538c631c4478d12d40eae724e81c3f192b45281e5cd31f2c81c5e9b27572d7fb","sha512":"821168c6f3812a6e1e96c0b4f4d3371eeafbdf9cddde2172763e62ff37144c982c8b9a602d6625972b11e06f5cb2c7ebe0bf4020622e8c3ab36af29be498efab","ssdeep":"384:QKSgO8F6FGFoFNFqE4pFhXFpMFTF+Cyjzb2U8FGwFhF8lcy2Fe:QKSgO8F6FGFoFNFqE4pFhXFpMFTF+Cyt","tlshash":"b37254a27ae94124742f96296ef6e7a4733c8403d50dcdb4bbdc305c8f852e91563a4f","first_seen":"2025-05-15T10:50:55.671457Z","last_seen":"2026-06-07T09:12:26.381202Z","times_seen":5,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/css/iziToast_custom.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.764Z","timestamp":1780823468764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/css/iziToast_custom.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 452\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1622,"size_decoded":760,"mime_type":"text/css","magic":"ASCII text, with very long lines (1719), with no line terminators","md5":"50c0f73eab9bc913f2dd95b95f48555e","sha1":"0a0c521a8752a1de73450b427a66349c2eda283d","sha256":"b2249300bde0c2a99720f686d89e400e870d0cae196d964796c8316f51cde112","sha512":"a19c6df3410bb79e6212bada187d01cafb01c19b3c3d1a47e208d53d9f7305f9fa83feeb72c14244753bbb2d06c15e269f9548aa19f248e0d25d815d53193817","ssdeep":"","tlshash":"6b3133d66df221b4add37ee49fff1a15a13b7c02b29c4a68b6dc214683a5341806273c","first_seen":"2026-06-07T09:11:49.973437Z","last_seen":"2026-06-07T09:16:22.878431Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/placeholder-image/50x50","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.779Z","timestamp":1780823468779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /placeholder-image/50x50 HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.27\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; expires=Sun, 07 Jun 2026 11:11:08 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncapital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl; expires=Sun, 07 Jun 2026 11:11:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 807\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1017,"size_decoded":1347,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (1025), with NEL line terminators","md5":"a023f08b5c66ea27c85289fecbab4067","sha1":"ffcfea7f94796d6149caf608220ff24640b6bbbb","sha256":"5f81d95d1d13f5c99d7fd73425ec42d96075f2a7d987ba33f8655ec935fe9537","sha512":"58694d267702e88a6bcef6a6ef45818ba18af7251111379069da5f26322dcd9ef1bc85285f7cb0566936272ef1ee56300f5cc1b9741e6cb23ec3eb16034ba6b6","ssdeep":"","tlshash":"7e510d57d1be4219cf8a66045cb2fc6ea4b2b0a119c430fdcafb61e6cf48d30b15c518","first_seen":"2026-06-07T09:11:49.974301Z","last_seen":"2026-06-07T09:12:26.379485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/frontend/banner/635a30a7d70821666855079.jpg","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.271Z","timestamp":1780823469271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/frontend/banner/635a30a7d70821666855079.jpg HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176239\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":176239,"size_decoded":176507,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f97c55f4bdfcfdb922466881e3c79366","sha1":"c2f5ac7c7738dcd03b9952de6441e0119813ee34","sha256":"0f9ae64bef9c7b786aed96999f555480892b57c1541490a49f25c749ba2e2739","sha512":"9bd504d4883e2b046ee4e1dad8a6bc225381903a67ecb7ef8ed1015b45a7a2cef04d36686cfaea9287e96d96f5db3d2b6cc9e58a00e81674678ff4993f249980","ssdeep":"3072:qWhAfcC9ha547ni7TzOoFqpYb/+2nvOAQ+DHZDdnJ+WlbHvQDoC8Try1kjD5fJ+k:B2fTMkibODg+2vOA5NDQkJryAhJ+k","tlshash":"f5347a40c732ce79158345ef5d2336d56578f7f492eec0f72291aa03b4e68fad099a82","first_seen":"2026-06-07T09:11:49.9752Z","last_seen":"2026-06-07T09:12:26.356585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/images/bg/plan.jpg","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.280Z","timestamp":1780823469280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/images/bg/plan.jpg HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78483\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78483,"size_decoded":78750,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fc2cb39f274db7e4bb872b824051c4c0","sha1":"a9daa79f02c3e875f6ef90de80f9993200525aa2","sha256":"020c193eadb2b0345fac5ff552101c7e0e445e4fa880b6f72b5ce2763dc3bdaf","sha512":"a16972a638f57d2b3681219dadcfe685b2ac07e8d82b200092709c5618f60a573ad78e4c56cd22574f1f6ed7584bc915b3e9cea21af63b78d39ed4b7fa41abb5","ssdeep":"1536:nDk0TR88AnpSYGKVuDXHfnPAh9D4B4Vx77YYftzLTY0r09U7Ews:nDzegtKVuD3v+90B4L7VHr09MEl","tlshash":"7ca3f173508a7e91669a1d10a5a2356c6f51aef3c35cec75f5c80887a0fd8a0ff2cd88","first_seen":"2026-06-07T09:11:49.976378Z","last_seen":"2026-06-07T09:12:26.380114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/templates/basic/images/elements/right-arrow.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.285Z","timestamp":1780823469285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/templates/basic/images/elements/right-arrow.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/assets/templates/basic/css/main.css\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4884\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4884,"size_decoded":5149,"mime_type":"image/png","magic":"ASCII text, with very long lines (6514), with no line terminators","md5":"733a16b24565426a1c9edd572b47ca44","sha1":"b630894d46e6344c7f859c2092f4937728d7ee03","sha256":"10ebe6382f767d76cd2a32996bfb7bfa288b243bce1c9ef8a041c0587c9be850","sha512":"fbcbe96d75a25a3e62b4ad5ea684036f81d979c136837e6c5c9e12dd699cd959905080238e6f94646aa09a7e77df30c726138147982cf4c082d0686617479d70","ssdeep":"96:ld6xqK0RGgJ4P1C29bWAwuPbuJs9hmXHRQY4yfWZHLng48AZV:lMxq9RGge9iAwu6JsfARQHyKnB/","tlshash":"f6d17d37e257053de1b28cd47048def21e740ae7cad241bce51c226c8cafcd1268689b","first_seen":"2026-06-07T09:11:49.9772Z","last_seen":"2026-06-07T09:12:26.348142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/css/all.min.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.735Z","timestamp":1780823468735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21985\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102641,"size_decoded":22295,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-20T15:29:40.46383Z","times_seen":30208,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/global/css/iziToast.min.css","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:08.763Z","timestamp":1780823468763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9933\r\ndate: Sun, 07 Jun 2026 09:11:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41500,"size_decoded":10242,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-06-20T13:24:01.195982Z","times_seen":2026,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.327Z","timestamp":1780823469327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 10:17:38 GMT\r\nexpires: Fri, 04 Jun 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255211\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (57516), with no line terminators","md5":"64575b7d92820779993c9df68325aa7d","sha1":"4f220b2919a31ad150a89b4c88edf9339d966ee0","sha256":"2194a2a0e609b3a24485ba97babdb360930ca8aa3700423ad6f3d5913270a15a","sha512":"dea9b95ca1ddea582ab1b84d302d5128938f236fb1cb9da76b2cd62e072a0f24b60258e107d284f93d3f8f33ca13f62e459ed541ffc136710eacb034b291efcc","ssdeep":"1536:JA7I/ZzZeu6FC/L4O6NTGt9mVf7Ma1Ej3Oblx4iueYV9:+7IBz/6FCj4O6NTGnS7XEY/4H9","tlshash":"2943f1a6b3a94e09c897c1a79b7de3cdc2548106c71a7057aeb490c245eb57cf2682ce","first_seen":"2026-05-25T14:46:18.034217Z","last_seen":"2026-06-07T19:22:09.833366Z","times_seen":871,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":22,"dns":1,"connect":0,"send":0,"wait":21,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.337Z","timestamp":1780823469337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 15:07:14 GMT\r\nexpires: Mon, 31 May 2027 15:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583435\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40836,"size_decoded":41649,"mime_type":"font/woff2","magic":"ASCII text, with very long lines (54448), with no line terminators","md5":"d2f7a10984c48f90b83cfab6d1399053","sha1":"b1c12ff1d781995a0007b11661f9e3052c1f1147","sha256":"c1ba658aac475f54451f4f9494c05918b699ed68ef9c80fb3972ea0853637bed","sha512":"bab5b579c7a1a2623011521915fc76514ee4de95fbf1aaa32f2e091ab6f14624e1c32bc654bf4ea824f25302179b367e19f632157c8403f3a0d91cd8965ea81b","ssdeep":"1536:zjgcSmzkPSk/Qx36SNZnnGWOAK91t7VENcOXha1:1dkPA6SNwL9GVI","tlshash":"f733023bade4b37d47affc30e875a1ab14004fd3d4c4276a0e2a97a399d4006770a45c","first_seen":"2026-05-25T19:42:35.479716Z","last_seen":"2026-06-07T17:55:12.420693Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":48,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/logo_icon/logo.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.585Z","timestamp":1780823469585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 15:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 261058\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":261058,"size_decoded":261325,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df6f3b46eab85880205c154d4ed6e2dc","sha1":"b46abbd05a3f2f78c191c9a7e27914820e44458f","sha256":"988ed3ab69cc69a4a3b48fe8d6e4cc91246317da8901a2c95008a39605e107a5","sha512":"4326e049598295577229cda078d9fbb4ab719f630fb32a87b2ddc8253605f24988c2e774dc18d85a06e53b3eec7cb3c842c6af8906e27b5b534e6f6d75739526","ssdeep":"6144:ORPbc1YBoH2xYGvBJER+e/hEuwdnewGSrQz0UOTCwDtjZnjLKR:OR6YcAvjkhEZdp5vT9DpZnQ","tlshash":"ef7412716e8c785ea70aff2315713b2c2e6226e700dee4dd31a422d1254d9734aa7fe1","first_seen":"2026-06-07T09:11:49.960975Z","last_seen":"2026-06-07T09:12:26.33614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capital-turn.com/assets/images/logo_icon/favicon.png","fqdn":"capital-turn.com","domain":"capital-turn.com","tld":"com"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:09.587Z","timestamp":1780823469587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.capital-turn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:12:07 GMT","end":"Tue, 25 Aug 2026 08:12:06 GMT"},"fingerprint":{"sha1":"AD:C5:88:0D:10:77:F6:14:72:55:79:18:02:2C:19:CA:04:4D:82:9A","sha256":"7C:DC:D9:FB:7B:D4:6F:41:E3:26:76:A8:DF:BF:D3:17:F5:E5:87:04:0A:1F:60:92:8F:6C:3F:C9:63:BC:F3:32"}}},"request":{"raw":"GET /assets/images/logo_icon/favicon.png HTTP/1.1\r\nHost: capital-turn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://capital-turn.com/\r\nCookie: XSRF-TOKEN=WQyomp8kzyyoiFfeIKoYBfZTc0yxvvfn7OTI0jPG; capital_turn_session=EAnCOwtRnsUiuF7hfyfCG4o3wv5CP6ktcBuGVURl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 09:11:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 28 May 2026 07:02:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10980\r\ndate: Sun, 07 Jun 2026 09:11:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10980,"size_decoded":11246,"mime_type":"image/png","magic":"ASCII text, with very long lines (14640), with no line terminators","md5":"df96371ab284a56eae38d51f95cb093c","sha1":"78cde4cbd6ec78bf78943beb1ddd0339bd2a8dba","sha256":"4b80f5f39caec79b1b4dcc93a891e03a95541481b1f0282360e4f65cb2d05d31","sha512":"d3fc6d8a449aabb83ce124304b7b7544f6ee40e09c800d10ad9753abe004ac6e4b0a0bc806e45093d3b248586e4c75e3b538de2104f32a27c3202633ef7e9cdb","ssdeep":"192:MmUDk/bVc8D/8zvKEcskl3J8iDZSzL3+Pmy244uyKQAk/iiXIA4Hc/xD0UFXjgr:MDklUKIklD4zTw24Uok/ii54Hc/xQgjk","tlshash":"ee62c1c683a1d2166c3ff1d2006365e7f15a8c02e1dc79d25f5ee289de41a58386136f","first_seen":"2026-06-07T09:11:49.979159Z","last_seen":"2026-06-07T09:12:26.344221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"capital-turn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://capital-turn.com/","date":"2026-06-07T09:11:20.287Z","timestamp":1780823480287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://capital-turn.com/\r\nOrigin: https://capital-turn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:11:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 9894dc878aae0ac737f8001c982da8ed66a97657\r\nx-77-nzt: kw2pOq7M3Gj9RWkmAn10JbvhNysHVIV+0CiLS8dmXszr3K9Xu/QDNMtjsaO8z9t4Hl7LWrs\r\nx-77-nzt-ray: fdb54123e8b3ba7fb835256ade479114\r\nx-77-cache: HIT\r\nx-77-age: 385\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":3346,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7750), with no line terminators","md5":"7b334683c77f53f548308704616060af","sha1":"c69612c00fead142002d14f2fb2023b2c1d9949f","sha256":"f3a7b409d4280dfc91192dd9784fa4b60537d41195ff8d49175e80116d574dbf","sha512":"f858ed229db42288da37ed927b3d05b8c404d9bedcd6b7863ea67f055aaab46259b176eebce606e51cd334410a693e20b1dde88b90a817fdd659acd976ba43e3","ssdeep":"192:+K6Qlhgx87HSeE1l8xhQZz4pD/7IUKPxySXY2zs:+K6rx87RiehQZz4pDjYPxySo2I","tlshash":"b3f1604fe948ca59c6c28f8676be7c33251f8131026116b8378cc9b9a1665fc27f3785","first_seen":"2026-05-25T20:34:17.714589Z","last_seen":"2026-06-07T19:17:46.057458Z","times_seen":25,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":29,"connect":8,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}