{"report_id":"e035eac3-8971-454c-9ee7-11a40284c465","version":6,"status":"done","tags":[],"date":"2025-11-17T21:26:25Z","url":{"schema":"http","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"title":"globaltradecapitalltd.com","dom":{"size":42459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27328)","md5":"9c004d606220228c14b3916f4f3b73b5","sha1":"249d5346476e9f2656cf29407f7ab495bed12102","sha256":"4a103dbcb222106850e0ee53ea5cd78d7f8291cfa56b6ba6975a98b0c7bcb29f","sha512":"ed57328e7a1f214c7e6c5452794ff52e38440dc74a0ae2c2e5c30b8992cf95b2dd0fb16bcecee6a15ee112330aff67950a71530180c76fe2b0e32340172b6d45","ssdeep":"768:4j+8FYTbfsTQ+YDGDPKHs9TvfqaSQXOQGMWYWf:4j+8FYTbfsTQ+YDWPKHshqa/XOnrf","tlshash":"101396176780462c9c5392a8f399e54ea32df694ef6359eef7c62410c2c93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2025-10-26T17:42:09.996327Z","last_seen":"2026-01-13T11:36:39.461231Z","times_seen":1047,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-22T21:26:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":8,"received_data":142958,"sent_data":4282,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2025-11-17T03:35:13.313206Z","alert_count":0,"request_count":1,"received_data":18645,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2025-11-17T03:35:13.224298Z","alert_count":0,"request_count":3,"received_data":309868,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":2,"received_data":42311,"sent_data":1151,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-11-17T00:03:59.025054Z","alert_count":0,"request_count":3,"received_data":367608,"sent_data":1749,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2025-11-17T03:35:13.296328Z","alert_count":0,"request_count":1,"received_data":7545,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":10668,"first_seen":"2012-06-02T01:43:50Z","last_seen":"2025-11-12T03:57:43.766546Z","alert_count":0,"request_count":1,"received_data":1373,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"globaltradecapitalltd.com","ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":25,"received_data":1481908,"sent_data":13134,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-16T22:20:16.151448Z","alert_count":0,"request_count":3,"received_data":44801,"sent_data":1699,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-11-17T00:03:36.850204Z","alert_count":0,"request_count":1,"received_data":79868,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-16T22:20:15.656981Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.194.241.68","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2025-11-11T04:46:38.53491Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.196.70.29","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2025-11-17T03:59:20.051813Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":614,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6eaf72228d171ab6d2af79dae4932d9","sha1":"34a9df58f488298a0049b8ec105adcd9856c7745","sha256":"f2f5282ae9a2990cc23102ca7ad260cdde0613baae6fa54e1f9931a6a1d60d48","sha512":"fe595e0c194759db3fe696f19a5095ce43a10c0c8c44e4c5e1c742cdb8a734567e9a0e2b43152050cf6bbeb2525894c653cc185808bb7bbff66d6d7bb6eb4db7","ssdeep":"","tlshash":"38d0a703f034101e1886a119e3815ac83234840905390d15375298db7cf3fac234e1a8","size":235,"data":"","first_seen":"2024-12-02T20:15:51.111024Z","last_seen":"2026-03-07T12:35:23.304919Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d5c058f960e7e71cd6064a2f8e2e2e0","sha1":"0ebb56f4715ec150d0165fde5391cb360db50019","sha256":"6ed8fe134e092042ab5e1c2329d78783cdf0b4d17aa9572f744ddf6980fb21e4","sha512":"a536321a989cbd43f164d3c46b3731e69e9173ace646569ef707ef5d68fe32f2b53a8c2f8f6adea41e2802d608f63258695075c6fe5d391cce2271b12dac9b79","ssdeep":"","tlshash":"90f0bbae14436c225b72032836abd7407da045432409ec57ac1c01a6ff70a3150e6a3c","size":487,"data":"","first_seen":"2025-02-09T12:00:28.076098Z","last_seen":"2026-05-24T14:23:39.907497Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery-3.4.1.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-11T16:29:40.137796Z","times_seen":138860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery.magnific-popup.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T18:01:33.079817Z","times_seen":73579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f26030152adfcea0e604bd83ae469ebb","sha1":"f70c752b1abe348d6e24245af48bf6ef42b381ba","sha256":"9e331a9af69bd7d63fd45fded1500e75f17b91e86bbf6b2ddba19b1397998b3e","sha512":"5296ce3d269d503f9c513ed7f142c08277d02c382ff7ea06cd714a31611278e1fa32fd38a7621759e0e788a6405178277df064cfc0e6f9bcbae4bc684bb75457","ssdeep":"","tlshash":"3de0613d3c744097579341b4c1b7e22c3e5a70644056d957989a8c795cf1fc97d036e5","size":418,"data":"","first_seen":"2025-11-17T21:26:33.9374Z","last_seen":"2025-11-17T21:26:33.9374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/onyx.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","size":17603,"data":"","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-07-27T13:40:04.268573Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#209","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-11T13:36:35.044853Z","times_seen":37118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/_/translate_http/_/js/k=translate_http.tr.no.U6lHSo0e8Gk.O/am=KAAD/d=1/rs=AN8SPfp3IO5NyYBwW_iZFdafgv7EfmWg7Q/m=el_conf","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5aa1edffa2f4b26545956205fc718178","sha1":"ea182d16af3dd8f41f6227585af15b8cb613224f","sha256":"2570e58a7944d612a5a2773b270303260849c9a4340c0e9ff94eb1694d90044f","sha512":"f3caef3260e56d76ff47af8788a84699d2071dfddca99e3aee4b705d3336c7e0b425282f59f83c5b65bc44af4f0008032bf79977a57265c80685c838f10110ae","ssdeep":"1536:X8HUsKTl8HPsAUfgLk4KIOINspR1/KucbRdwZiWwNWZT:XiPbk4KIXneZiAT","tlshash":"5573c7ccb6a675628263f5b5513f000fb23b5999f8084dacb288d8e1adb594c413bf7d","size":79165,"data":"","first_seen":"2025-11-17T21:26:33.917688Z","last_seen":"2025-11-17T21:59:00.090815Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","size":269534,"data":"","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/bootstrap.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f827fe484ec04346553202782b0664b","sha1":"a9465bbb5a0aef24f9b25184e3da3637634635f1","sha256":"a65d5b4abb65aad37f302c96f1751362e2422a8869f7f889112556d77e384813","sha512":"b0bdd14fd41e96eea34eaa16515cc602e9896b26a48743fa59e988fe05dbb10c457f92f426a17832fa9179e7e126a1d2e535c926a53fc1a41d1eaebb9c00f38c","ssdeep":"1536:5ZMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:J59siWFUOvhMEq1rdK","tlshash":"2fd3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","size":131637,"data":"","first_seen":"2023-03-07T12:09:05Z","last_seen":"2026-08-06T06:52:08.097672Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery.countTo.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","size":3761,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T22:32:40.967084Z","times_seen":1400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/swiper.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5bb26def607ac0e0e114a502ac65e38","sha1":"2cd244e7a00c598ed9ec4e0d04325f8511667816","sha256":"770008a560398e6ab513700705e2431fce9e999b8e10c299ad9c4dafd0c9010b","sha512":"3db22c669b0df4cc315529cb2180e90d3318bec989cb5c01e130919c9889e7e6102150a138ea53114889965607add93ac5a5407a0bc10e4612970220dfc5ebd1","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgT:wxoo6desFshaKi+HgZsUOUTqiqM37EO","tlshash":"d9d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","size":139191,"data":"","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-08-10T22:04:41.839497Z","times_seen":2096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.U6lHSo0e8Gk.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfroCEX4qKxRwRI02PPw-isXsjYQtw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"877b2b858a18575633851c6cf76c998d","sha1":"b4f6bf4f56005241c48e0871e8aa500d5edb080e","sha256":"94a8571cf78ff8e4a5d9b1e52e1b7df1c7fc3d5fe10d4b8dc4b837eb7e8fd558","sha512":"f9dc7de9128e668349e116f95a2b3479176ce19ca9afa341dbfaed82ffe0646c9b9fb43e8684e2c966ef70ee47d0ec54488871889b3e02a368ab075dd909f12a","ssdeep":"3072:AEPBuxBRzozbBRMvpLMASGOB9Kxdo/C5VFdtTxob2EubJYtK8L7oI/fwUmpama:MRI4aeJxMtV7oI/IUx","tlshash":"8e74b6c9b26634629262fce1906f10cba93eac57b44c4c6cb249ecd65df094941b3f7b","size":365654,"data":"","first_seen":"2025-11-17T20:58:33.436963Z","last_seen":"2025-11-18T19:18:11.750397Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c092ffe5b4cb952929c7aa0121b5c030","sha1":"788f73f8179f68c39880e6f730ac08589f72fae2","sha256":"35a9e66148114345c9fa83480b3fe2913bf3b3500e34c285bbb051ad2292f4c6","sha512":"de6146367dd6ef50221732819df3829cf23e19ff16fb2ddda38b3f8ab9ade84bbd0b96c1d8390204c43a105af2d2349d550f1a38a64b0c99f4b0a4056889d9f8","ssdeep":"","tlshash":"f1f0dcb30234b829c2429620ebc1653ee113c60485686cb6736811b6e1d861e80efaa8","size":470,"data":"","first_seen":"2025-11-12T19:57:58.933939Z","last_seen":"2025-12-11T19:03:17.08202Z","times_seen":873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/logo.png","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Apr 2025 11:30:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 140209\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1877 x 688, 8-bit/color RGBA, non-interlaced","md5":"6bebcc0d048e963aac0b12934db99947","sha1":"5e5e0ae080dce737afdb7bf97d32587561fd5883","sha256":"60536e17c4eebd616b8e3898fa429dae50f2b7c612bf7f0e484a582ff89d98e2","sha512":"93ae78ae99ed0c136c4ee30c59d2fb8bc4bff886452e25f8a0c4c13565d933c3eb4821743b33145ff1c10c0a52d7c0f1bc28dffdd23a85d8e19f4000998513a1","ssdeep":"3072:+l7pK+Y5wVJTDaAFuN6JRWkI/nYEn57U7buVdjeoSoB/RRQVU:ERYWTeAswJS1VU7aVdapCQVU","tlshash":"4dd31599e360453772ccea1165a35a8bc04c1d7bb48bcc0997c3a7af1647bb62c34d6e","first_seen":"2025-11-17T21:26:33.868619Z","last_seen":"2025-11-17T21:26:33.868619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-05.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-05.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18471\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18471,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"9dc67bbef0ab710763756dab81d90f83","sha1":"a7ccb16b71d1932a3ba36a86e6edd22c7ff242c1","sha256":"6e786b043b6348d272c4370dd3b5377002897171e7ac79006114149297673f39","sha512":"4645f5bcedcb6f6f41d5c32e274d118fd017d4dc2148767b62ea840d9cab653ba920c6ea2f25d9f93416cc884302afbe3e0b3cba496921ae4dd668b45e115b0f","ssdeep":"384:5ZjDjZr+aJtZk5CfYbimGhqZdmfar8kw7WTcnUwWZYA2UOt8tO9:HdnJ5Yb2lfLkwCHZWA2UOt8M9","tlshash":"e782c02c53662f13e9c73934c5fa04e2665a19c4a28dfb8d207c1d80dea9de6078174d","first_seen":"2025-07-12T14:31:51.859927Z","last_seen":"2026-03-15T05:20:01.383635Z","times_seen":4,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 00:00:28 GMT\r\nexpires: Wed, 11 Nov 2026 00:00:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 595541\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-11T16:44:06.765755Z","times_seen":12270,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":16,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:38:21 GMT","end":"Wed, 04 Feb 2026 03:38:20 GMT"},"fingerprint":{"sha1":"20:22:46:AD:41:FB:E2:25:E8:9E:07:B9:A1:89:34:4E:C4:6A:72:1D","sha256":"EB:B1:F4:50:CA:74:9B:EA:9D:6D:23:2F:E5:17:88:07:A2:DA:B7:89:5C:C4:C4:34:60:4C:15:4E:1E:5A:D9:45"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68e92f38-46dd\"\r\nexpires: Mon, 17 Nov 2025 21:28:45 GMT\r\nlast-modified: Fri, 10 Oct 2025 16:07:20 GMT\r\nx-77-nzt: EwwBuUwJCgH3FwAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f754201b454c83f2921b698e0b1c07\r\nx-77-cache: HIT\r\nx-77-age: 23\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":101,"dns":62,"connect":7,"send":0,"wait":7,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69085dca-7b0\"\r\nexpires: Mon, 03 Nov 2025 07:53:33 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJCgH3HgAAAAwBuUwKCQGzPQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: e2f75420f52d388ff2921b697815c018\r\nx-77-cache: HIT\r\nx-77-age: 30\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbc9d37f7ca509d3f2faf0216a2dbc60","sha1":"b141cae5428c630f961ba82494ff8fd0521105f2","sha256":"2285b0615deb1cd53267994a4cd044d2c4512b5516fbf099e3e8e353c705b208","sha512":"383444b84c22c67c4b8550a8c76b68bfe083f5d9f2245b1a1c8493d787ba4a670f3cf5d290a1c8091645e02030165d026347be719104393c9bafa8697925db63","ssdeep":"","tlshash":"e2410693c0b80d531b9c612bb8945a414d54c3c7e88a3d0d366d8a7f2f0ceba10e67ad","first_seen":"2025-11-03T07:55:21.200063Z","last_seen":"2026-01-13T13:06:51.401082Z","times_seen":3414,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":79,"dns":52,"connect":7,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-06.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-06.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16454\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"f5c3e2713524970ec7156aa7bdfbeda6","sha1":"d8eff9b9de2058e4895480e3e52dfa590983e14d","sha256":"87267f0c6c3864d11bf17ebd8e2204fe4981cf8a1170fb3592b9caa5c0536a27","sha512":"358fc2a3a8118d1b5520505a6a11501a27b33317d0fbb9657bd28242fba8478c5c8daa7f93afa3c62bffc18daf5ebc2cbf2693c6facf234f831ef13615097a29","ssdeep":"384:sq+28aRwpJl/GorkD5c8tNHRrKYOVi0rBt5pVqcP/eIZjt:sq+2c3l/n4D7NHRrtA5p4cPGwjt","tlshash":"0e72c07d4752eb54d800189fe5f1272ade2a97280e40067ab0f2be7568c94b34f73d7a","first_seen":"2025-07-12T14:31:51.943218Z","last_seen":"2026-03-15T05:20:01.386853Z","times_seen":4,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/swiper.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/swiper.min.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34033\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":139191,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"e5bb26def607ac0e0e114a502ac65e38","sha1":"2cd244e7a00c598ed9ec4e0d04325f8511667816","sha256":"770008a560398e6ab513700705e2431fce9e999b8e10c299ad9c4dafd0c9010b","sha512":"3db22c669b0df4cc315529cb2180e90d3318bec989cb5c01e130919c9889e7e6102150a138ea53114889965607add93ac5a5407a0bc10e4612970220dfc5ebd1","ssdeep":"1536:Fj2qhgxfeuGMfoqi2ZLjK8ieVlLXCiiSsWRLK7A3dnaKBjY4vHgZsUOUTqiqpBgT:wxoo6desFshaKi+HgZsUOUTqiqM37EO","tlshash":"d9d3194eb39061a551e36257535e8241a3b72809780ad0ac35b688e79dbde4c13bfffc","first_seen":"2023-03-07T01:06:35Z","last_seen":"2026-08-10T22:04:41.839497Z","times_seen":2096,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/bg-page-header.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/bg-page-header.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/assets/css/main.css\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19749\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x300, components 3","md5":"9b4f3df1164ef6231ee0d5cca5362332","sha1":"7072826b6b75770b396cd1685c7ccfd7e302f01a","sha256":"08f841e8d242fe8da7690e57d61b78191e0a76de10fdefc6b8612bc72f8e89b4","sha512":"bbe6b5f072a0800b82b4f2755a6d662372751addb293f811180b76984ba14666038dfe8998d82fe6f3bec2abd111bb0963fe3187248f630e2bde71e77f56a225","ssdeep":"384:EGAcWIsDaFBr3cfwdPds38sltWJ8yG/EIGWAszd63C98GDtp5/pqT7Y9AO3:E6QmeIVs38atTyG/EAbzAd4ppw0AO3","tlshash":"3d92e056fa82cd25f1b7403d09b26365db36c850235acc9f521e8111b67a0eecbc782e","first_seen":"2025-11-17T21:26:33.88054Z","last_seen":"2025-11-17T21:26:33.88054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":108,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 00:00:28 GMT\r\nexpires: Wed, 11 Nov 2026 00:00:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 595541\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-11T16:44:06.765755Z","times_seen":12270,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":38,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/menu.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/menu.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T17:08:25.98009Z","times_seen":148901,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=KAAD/d=0/rs=AN8SPfrEhjwKQtfIMGzo4eU7k5Q4VOwrZg/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 17 Nov 2025 16:23:22 GMT\r\nexpires: Tue, 17 Nov 2026 16:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 18168\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-11T17:34:19.33568Z","times_seen":74452,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Nov 2025 21:26:09 GMT\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-08-11T17:49:50.527707Z","times_seen":49973,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":214,"dns":0,"connect":28,"send":0,"wait":48,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/css/main.css","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16108\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de6481ceeb34c096816e26d20a02b823","sha1":"d9247d68cf6b73e016885d8e7ebbde7f6202f90e","sha256":"3f57aa776662fe0466988036abe79bcde97ce7389699664b1fc1e91ecf56a94b","sha512":"55c716c2a51d36692d5270507f295c412852937b22c05d71847116bcaa716bd65ea1b168ea8e4e885652481d3d6ec927beb54d4de42f1bbc48e9115bf1a5ebf7","ssdeep":"3072:0ICRCUTWst+mq11l9q485vCMI282OdpOsTJ6F6rgIkHpPz0:0ICRCU6mq11l9q485vCMI282OdpOsTJ/","tlshash":"e8c38252affa0909301fd1fc7a52aa65f77c58b2820fdeb8bbe930189f415d5443ea44","first_seen":"2025-07-12T14:31:51.800818Z","last_seen":"2026-03-15T05:20:01.47442Z","times_seen":4,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/bootstrap.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/bootstrap.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23508\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":131637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (328)","md5":"7f827fe484ec04346553202782b0664b","sha1":"a9465bbb5a0aef24f9b25184e3da3637634635f1","sha256":"a65d5b4abb65aad37f302c96f1751362e2422a8869f7f889112556d77e384813","sha512":"b0bdd14fd41e96eea34eaa16515cc602e9896b26a48743fa59e988fe05dbb10c457f92f426a17832fa9179e7e126a1d2e535c926a53fc1a41d1eaebb9c00f38c","ssdeep":"1536:5ZMG/5lzsiLOvFUqZGbVLK/vuOhubEq12NQdYz:J59siWFUOvhMEq1rdK","tlshash":"2fd3550a3efa2492445bf43e8bef9106f774548b5909d9087c5caac81f9493453aebfc","first_seen":"2023-03-07T12:09:05Z","last_seen":"2026-08-06T06:52:08.097672Z","times_seen":1256,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.U6lHSo0e8Gk.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfroCEX4qKxRwRI02PPw-isXsjYQtw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.U6lHSo0e8Gk.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfroCEX4qKxRwRI02PPw-isXsjYQtw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 104518\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 17 Nov 2025 19:10:20 GMT\r\nexpires: Tue, 17 Nov 2026 19:10:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 15 Nov 2025 12:08:35 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 8150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":365654,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2581)","md5":"877b2b858a18575633851c6cf76c998d","sha1":"b4f6bf4f56005241c48e0871e8aa500d5edb080e","sha256":"94a8571cf78ff8e4a5d9b1e52e1b7df1c7fc3d5fe10d4b8dc4b837eb7e8fd558","sha512":"f9dc7de9128e668349e116f95a2b3479176ce19ca9afa341dbfaed82ffe0646c9b9fb43e8684e2c966ef70ee47d0ec54488871889b3e02a368ab075dd909f12a","ssdeep":"3072:AEPBuxBRzozbBRMvpLMASGOB9Kxdo/C5VFdtTxob2EubJYtK8L7oI/fwUmpama:MRI4aeJxMtV7oI/IUx","tlshash":"8e74b6c9b26634629262fce1906f10cba93eac57b44c4c6cb249ecd65df094941b3f7b","first_seen":"2025-11-17T20:58:33.436963Z","last_seen":"2025-11-18T19:18:11.750397Z","times_seen":127,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":91,"dns":49,"connect":21,"send":0,"wait":22,"receive":49,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 03:05:44 GMT","end":"Tue, 03 Feb 2026 03:05:43 GMT"},"fingerprint":{"sha1":"37:BA:FA:5B:53:2D:84:E0:FB:81:87:85:C5:A9:5B:0E:05:63:86:5E","sha256":"CB:7A:FB:73:78:5B:E8:CC:67:2D:67:04:0B:9F:6A:DD:44:91:50:28:4F:04:0A:8B:F6:0C:29:08:3A:C5:CC:60"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globaltradecapitalltd.com/\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 33763f6ddfb2a85ff042089718edfb908868528e\r\nx-77-nzt: EwwBuUwJGwH3YgEAAAwBuUwKEwH3AAAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: fdb5412383081eacf2921b6926cf5b28\r\nx-77-cache: HIT\r\nx-77-age: 354\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaa6ba52943a5e44f695684fe0452d88","sha1":"be3068ed1bee23685694678914dbc831269e2c81","sha256":"f2bf55f12f577af380f9e18e2223493abf01887c75367b9cbf106bd7a021d4bc","sha512":"1852e89a1e925807dbec8bd9a2e82787351cf5c83afe476b3695c00bed34cd1cbd091db8053acb697e3d81c2bdee590e35cc2cf76e7652377e6e39ff92088d8e","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/n:Al3GKYKZrJA2Yg48fXPdeD/n","tlshash":"f3e1c64f9a144da987c6438276cfb84675bc80734250993afd8cc8b842697cd63e3b98","first_seen":"2025-10-06T22:02:44.567758Z","last_seen":"2026-01-13T07:56:55.665114Z","times_seen":4037,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":75,"dns":51,"connect":7,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:20.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://globaltradecapitalltd.com/\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://globaltradecapitalltd.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 17 Nov 2025 21:26:20 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/css/bootstrap.css","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/css/bootstrap.css HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22803\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192348,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (570)","md5":"bd551f56ce2be3eba2812e605ab4f5b2","sha1":"94d6450720dd8deb413760cc9184204b46802e9c","sha256":"35fbb6dc3891aacaf1ffa07abec2344fdbc454aab533a2a03bcf93577eb7837b","sha512":"3310948ae23eb805e0afd67d7f11f563cd829ea46b5b2496a877a367250c5b9e5526a2f8b6b7fd15733f4a24fb3505d97781f49c93abe85000253123026ae6f8","ssdeep":"1536:2ycclspJfXkgUpuoRnm4ADXeASzja+QTzNlXK1wqLq9S/zDL4iDF4jg:25jkgUA2wqsS/zDL4iDF40","tlshash":"60147458fdf11504746b826c64d6f7f57b6d8087c61edebabae22224cf493c14cb2988","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-08-10T18:06:15.95801Z","times_seen":1675,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-03.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-03.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25408\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3","md5":"ffeeaf1ea311c69311171259067a4b94","sha1":"c37ed2179cefff3c0d8e460ad8aef0e909e44b1e","sha256":"2cf518cd8559af0abdbb90b05c2d8e26497a5b09383337dcc73680301124d9c0","sha512":"9e5bcdf7a1ec5dcc371464744990ba9dec8a8fcfdd4d5fdd074855910aa1c4cff46923ff5dbe1439b82210246be4093aa8ec9d1bc8c9e20f2dc2790435223915","ssdeep":"768:Pys27oD0/OYY9YELblXgNpcIUC9cVFy29Ib:PKoDmNY9fvlwjcIU4cVFysIb","tlshash":"dcb2f154f9c477809c963ca1ddfafc0eda7acbd1c3d3384784f446a9882e54126a71c4","first_seen":"2025-07-12T14:31:51.786864Z","last_seen":"2026-03-15T05:20:01.390475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery.magnific-popup.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7043\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T18:01:33.079817Z","times_seen":73579,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/onyx.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/onyx.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3010\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17603,"size_decoded":0,"mime_type":"text/javascript","magic":"magic text fragment for file(1) cmd, 2nd line \"/*-----------------------------------------------------------\", 3rd line \"* Template Name    : Onyx | Responsive One Page HTML Template\"","md5":"ebc8660d596d9dc50ee2f76de0a87d49","sha1":"80dc89e61a0da06fb470716e32d6df036faf4931","sha256":"2e8407e7a55fa7b505d07ead0610cad3a387f2a6c5de0120d57410bc6ad48965","sha512":"12a06022db26b278e6c589fc463091f8ede81f27e64fa938ef09b28bab306a82d0b74b95115acfc963eeb3c0b15c45004179c30f7ff11c1220bf252215f5217c","ssdeep":"192:2QZVrIOl+dlD9+ut6d2QyJClf4Q2yjG4znX:zMOYQllbX","tlshash":"66829908fcb1495308bbf47a0b7fa600ea544007cb8ded15b91e97985f4462db4be7da","first_seen":"2023-03-14T09:06:45Z","last_seen":"2026-07-27T13:40:04.268573Z","times_seen":76,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/fonts/LineIcons.woff2","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/fonts/LineIcons.woff2 HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/assets/css/LineIcons.css\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51676\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51676,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51676, version 1.0","md5":"ab4f93708f366ab8c6576d60e1646dbd","sha1":"099c8552ddc2cfb05159333577c1821d2c6d4919","sha256":"22d65627d2483a04af29571b0637043746d2536c84a977860bc3ece769cf3418","sha512":"922a15cc852de48f4c1f6456d1c35bd3c37d434d6071c7ce9513176cf10ecfe85c484cfe06e7258c75ae028ea31116e96ea9449a75403d8af4d81b142299419b","ssdeep":"1536:300E1+oUoXBAlRcofcklQagQN4zBiKgNT:k0q+JoXBY+S6QOBRgNT","tlshash":"5933f12c3416b2d2567850afb84e8afa4c5ef576ecc257ad98110650cd833c9fe7d08a","first_seen":"2023-04-30T20:48:07Z","last_seen":"2026-08-09T14:41:43.792457Z","times_seen":657,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-C69Zid5j.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/style-C69Zid5j.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68f60ab9-8f9a\"\r\nexpires: Tue, 20 Oct 2026 10:14:33 GMT\r\nlast-modified: Mon, 20 Oct 2025 10:11:05 GMT\r\nx-77-nzt: EwwBuUwJCgH3YIclAAwBuUwKEwH3CQAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420f52d388ff2921b69dd37071b\r\nx-77-cache: HIT\r\nx-77-age: 2459488\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36761)","md5":"7e896f506ee5b96cde339ba33f8593d0","sha1":"63a333eecbd0975faf126844168040c7d87da274","sha256":"6995412d91a42aef46fe8e139774aa00988bb18028a15bac2feb7c15ac28a623","sha512":"dcea6a83bbac485b50a9180be076e3fb6616545fbef0d3e531cbd998c9183d001f5c28ced200ca860bf5204d060971fb6678e6c079559b8353ac383ac1c97b0c","ssdeep":"768:E8H95TcrWYtvcXFOxrnSJPHs24v9+ggFgZ:E8d5TcrWYtkXIuPF4g2Z","tlshash":"2bf2975daad5093cec33c166e3f8e18c9629e5d1df321adaf64339048ac27bf1987514","first_seen":"2025-10-20T10:59:25.0177Z","last_seen":"2026-01-13T13:06:51.378879Z","times_seen":3895,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/css/LineIcons.css","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/css/LineIcons.css HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4472\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28260,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bdd836bfef4e60ac3b5c337ded27292","sha1":"6c8041b87228dac6ea6c5b7a54e506c894840a34","sha256":"56d09c4cd80f372c855706df481c12ff5d22e25cab78db087cc92b283f1d107b","sha512":"218bdc1700f2a14bebd69352c5e2f03c9066482680dfed4bcd358675d7a4f868603db7e88b12f5b6f0c552680def612097596d0f6d69a58fa21db1609634586d","ssdeep":"192:fq1XhYDGyqlxTBsdXK9EYEBPJljOET5TEVpfeAfbMJVxp5OyohTrfj4fGUxH7n/E:wlsU0jSET5TE/9/IlxH7nZUt","tlshash":"83c222e4d9ff0cd09b0dd0dd2247a620eb1cb2b5a8074c1dd7a2798e67e261464dabdc","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-08-09T14:41:43.817519Z","times_seen":745,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-01.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-01.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17032\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"7e37339a1374b7e72f1babd0b9a4d325","sha1":"afdbff9532b9e7229537d790a81050bb63b4cadc","sha256":"85b55d349e49812c2a706a0deef203fe3b8a770555ca2f7465244f489c81d1f0","sha512":"e1ba9317a55bc5265b0b0ee45750bc884baf3b4678db7f8da457dc889eddbbcdf6aa2a5418ba11462dc674e890420b89f9c0defc98847b9dd218e6dda1709069","ssdeep":"384:z0jOCPCXrm9TyvWfLQFjl85GhWWr6XuMLXkmiGziamECcLIyK:gjrC7mJ5fLQBq5GeXuMR2am7ccZ","tlshash":"b372e1230378812ee09416308fe1d37277f47a714eefee9f8a24b5ec400a6a458568e8","first_seen":"2025-07-12T14:31:51.928692Z","last_seen":"2026-03-15T05:20:01.483612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-04.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-04.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31508\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"48be75bc5b361345db1a710d3fe6ed26","sha1":"b1219e56b298e618f1cc53010e5fcb3217f5c3ab","sha256":"cf0fa3521492e373c1018659c864eedbb410cbdf693ce1f21a573a84712032d6","sha512":"996311482d74ca7eaf72657e271e0b427b6ccb6c3398b920bff07a8da6aa477efcf376d0366851e4bde510738fe7335d0593179a70123f3b3b553f18e2adf726","ssdeep":"768:DfA583v1ibm38wGBgp+iZp/cODihs28rOWFHrr4:Do5839ib68fgAiYODihsprOWFHrk","tlshash":"34e2f156eb2ec051182910f07758833ebad8fd9863f444c544d80cd9da641e9ae5dbfb","first_seen":"2025-07-12T14:31:51.801766Z","last_seen":"2026-03-15T05:20:01.406182Z","times_seen":4,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery.countTo.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/jquery.countTo.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1030\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3761,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-10T22:32:40.967084Z","times_seen":1400,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/footer.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/footer.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/assets/css/main.css\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339797\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"7ec435c418edd9f98e2e644e36af4402","sha1":"74e57926f814ba1113a1e6ef4e6533109e8edc26","sha256":"bd5a155b051de5323937c2a19a2fa5e31d2d3bdd569610b6752b12e44615293b","sha512":"5b21cc7b6e18d611aacd4e15a2e9e24ceb295e241950fdf9c63690bf639b6a3f20d1259ee3dcab76c04cc2ba083ba9b44d6befe7a0b59960df546d97e51e7904","ssdeep":"6144:rV5mHYMJRHz2v/rFrn5agY/Ju52fxi9M0+YPp9BBohhJgeQWSbqeDspO:LmTHz2nl5ab/JhfaM/w9TShD2b4pO","tlshash":"9074238e558b25e5dbba0b7c496d0a201175f7936f8b7c3deb0f8e70b31826610e805e","first_seen":"2023-06-27T21:49:27Z","last_seen":"2026-08-08T03:33:30.9259Z","times_seen":75,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/muli/v34/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 00:00:28 GMT\r\nexpires: Wed, 11 Nov 2026 00:00:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 595541\r\nlast-modified: Mon, 08 Sep 2025 18:05:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32868, version 1.0","md5":"1405c728dc80e40832bd97a8b156df25","sha1":"a96218e8987a6f3b6da022efe8365ad1118c90ae","sha256":"a91cd9085d4f94c0fb01e3e77f7363eea92bf6ed0faa0cee05d85050535f38a9","sha512":"99b9507d45fc508d13e0544fee7cd2efe01eb8a0f153fabdb794e58e2f39397fbaca228256c43428496ad25db6d48e16141558f4c4deb5a3a33f442bd3862af3","ssdeep":"768:jj1BDg1j8bGPwwXu+r3Nso9wcXQzEpFMQY:jzvVw3r3a7SQVQY","tlshash":"a8e2f1c063561a15a868a8343b6b6fdc68d8c0c1612e4d68fd75f0609ab5b2dc3e03fe","first_seen":"2025-09-09T02:07:46.120406Z","last_seen":"2026-08-11T16:44:06.765755Z","times_seen":12270,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 00:04:21 GMT\r\nexpires: Thu, 12 Nov 2026 00:04:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 508908\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-11T17:49:50.599894Z","times_seen":291334,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=KAAD/d=0/rs=AN8SPfrEhjwKQtfIMGzo4eU7k5Q4VOwrZg/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=KAAD/d=0/rs=AN8SPfrEhjwKQtfIMGzo4eU7k5Q4VOwrZg/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 19:19:52 GMT\r\nexpires: Thu, 12 Nov 2026 19:19:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 439578\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/?a=support","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T21:26:02.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /?a=support HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1; path=/; domain=globaltradecapitalltd.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Nov 2025 21:26:08 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3ddc085f594f5b5ec78357b588e0d581","sha1":"d604c8b89997c18a443adba58a2a9f2266e75f39","sha256":"46aed61b2ee6ebc783c26149faecc0a4ab8f6d059b5936e8170d63af94d50818","sha512":"39aa1e0e1e6562a781f44504299687eb32e326b39e3e1e83affe555d2e62783882b4e635628994dca083450854b355763e13f44352db2ad6314f055e1f5db3c0","ssdeep":"192:tnMrMXZQFkqh1zpxDo9sqWXlVDrbuwutPUq:erlFkqhD69eXlVXbuwuP","tlshash":"1db2eb215cf110270183a1e1aa71af2a7ed2e51bc61b9e1575ec0fee6fd3e868c1356c","first_seen":"2025-11-17T21:26:33.90947Z","last_seen":"2025-11-17T21:26:33.90947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7117,"timings":{"blocked":622,"dns":117,"connect":372,"send":0,"wait":5873,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"86:F4:DF:07:D6:8D:EF:68:44:7A:73:C8:39:14:1A:2F:98:5E:A2:40","sha256":"A0:B7:4F:94:25:40:33:52:BC:F7:0A:E1:AD:30:BD:19:C3:E9:BB:25:0B:05:26:7C:F8:BB:F0:59:3B:E7:F2:8D"}}},"request":{"raw":"GET /css2?family=Muli:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Nov 2025 21:26:09 GMT\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19280,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a45ae4d37faae26c0af66b350ab07e78","sha1":"01468dce265b9a198c70f2ce54ae292eb8b8fe8c","sha256":"0de6a50c2d0a1256cb7088bff088836bab1558092d1e6901cb0fbcf88219145c","sha512":"85f882cb1659887a27eb5c911ca7f9b84680119cb6b00d967d127d0e1a0ca05210bb2e0b43730979a98d68a34f2234bc4f862f11166a95e8cd53d46ba13aadc8","ssdeep":"384:cnh9Sn2mvn/j4ncMVnNJOnCC7nr/EnYoxbaRAv+l/:P","tlshash":"9382b092046be100db472dc6a3cfbe32ee4eb165b454c5796ffd0899ac5ac322325b4d","first_seen":"2025-09-12T08:49:07.617019Z","last_seen":"2026-08-08T01:38:29.732415Z","times_seen":303,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":317,"dns":0,"connect":30,"send":0,"wait":46,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/css/magnific-popup.css","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/css/magnific-popup.css HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1660\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-08-11T16:33:49.211009Z","times_seen":29700,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/img/instagram-02.jpg","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/img/instagram-02.jpg HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15434\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"63edbbaf53d4006abeaf672a30e93c02","sha1":"d4e2248893ada169968eb5cfd1cea383b9a18970","sha256":"03a174281347771de3209fb2a953e8234ce3a3b99b3aa1cd33fa46f1b05a5115","sha512":"ceca53c3142b2b958c55d2a7710d8dc887ee1902d5fecd16e432787433f862c65c8c913e73b688295201e7ebc1d1eaa78d6bb7c4afa5ecdacd3c54734f4d881f","ssdeep":"384:5gTYzTAOTLKLgR7/uSKwjRH2tgAv2d+NpUaONrI:+T/CLPRTR9H/c2d+dORI","tlshash":"3962cf79dff2841bebf9a5f74a41c257bba3aa9d3ed083ddb4841f9346410026d19c10","first_seen":"2025-07-12T14:31:51.920088Z","last_seen":"2026-03-15T05:20:01.47152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=KAAD/d=0/rs=AN8SPfrEhjwKQtfIMGzo4eU7k5Q4VOwrZg/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=KAAD/d=0/rs=AN8SPfrEhjwKQtfIMGzo4eU7k5Q4VOwrZg/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 19:19:52 GMT\r\nexpires: Thu, 12 Nov 2026 19:19:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 439577\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":83,"dns":0,"connect":8,"send":0,"wait":14,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 00:02:08 GMT\r\nexpires: Thu, 12 Nov 2026 00:02:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509041\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T17:49:50.556523Z","times_seen":296249,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/favicon.ico","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:10 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1,"size_decoded":0,"mime_type":"image/x-icon","magic":"very short file (no magic)","md5":"7215ee9c7d9dc229d2921a40e899ec5f","sha1":"b858cb282617fb0956d960215c8e84d1ccf909c6","sha256":"36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068","sha512":"f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-11T15:58:03.476146Z","times_seen":39608,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/css/swiper.min.css","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/css/swiper.min.css HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Nov 2025 21:26:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3805\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13411)","md5":"08a2179b7e519e9258cd789a70c0c02e","sha1":"970250d20f2ec314420a20e9b2c27ec02b89639d","sha256":"607b6373b529d07da80e5c0bbce46ea42f08f93c3c0d5c26aa231cff4a2d80a5","sha512":"1bcce525618810f9fbbd80ca7e7f47cf2860cbb81a8194ddf31945f1d818c7dcf05ea0d8a165b793d49a14abba415a1fe7e580d36f6e52f243565cc0012b59da","ssdeep":"384:VbUbeQS7Rgx9BU0W/XCcif65W/1mXA82FHpx:VIb67gbhW/XDif65W/1mXA82Fn","tlshash":"8652236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-04-17T09:05:25Z","last_seen":"2026-08-10T22:04:41.874659Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CJ4H; Domain=.google.com; Expires=Sat, 16-May-2026 21:26:09 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2060)","md5":"5aa1edffa2f4b26545956205fc718178","sha1":"ea182d16af3dd8f41f6227585af15b8cb613224f","sha256":"2570e58a7944d612a5a2773b270303260849c9a4340c0e9ff94eb1694d90044f","sha512":"f3caef3260e56d76ff47af8788a84699d2071dfddca99e3aee4b705d3336c7e0b425282f59f83c5b65bc44af4f0008032bf79977a57265c80685c838f10110ae","ssdeep":"1536:X8HUsKTl8HPsAUfgLk4KIOINspR1/KucbRdwZiWwNWZT:XiPbk4KIXneZiAT","tlshash":"5573c7ccb6a675628263f5b5513f000fb23b5999f8084dacb288d8e1adb594c413bf7d","first_seen":"2025-11-17T21:26:33.917688Z","last_seen":"2025-11-17T21:59:00.090815Z","times_seen":3,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":153,"dns":65,"connect":21,"send":0,"wait":39,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 00:02:00 GMT\r\nexpires: Thu, 12 Nov 2026 00:02:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509049\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-11T17:49:50.593745Z","times_seen":390442,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":129,"dns":9,"connect":14,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 00:03:41 GMT\r\nexpires: Thu, 12 Nov 2026 00:03:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 508948\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T17:49:50.537276Z","times_seen":275416,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:45 GMT","end":"Mon, 19 Jan 2026 08:35:44 GMT"},"fingerprint":{"sha1":"88:42:9A:E3:85:29:1D:A4:9A:60:E6:5F:C1:71:A6:01:27:91:C8:BC","sha256":"6D:0F:B5:30:E0:1A:7B:ED:55:DD:26:C8:34:D0:0A:34:65:0E:E8:E4:93:E9:8C:DF:D6:3C:63:71:A9:AE:DF:D2"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-08-11T18:04:32.159597Z","times_seen":82906,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":69,"dns":2,"connect":8,"send":0,"wait":18,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/main-ptirgKus.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69085dca-41cde\"\r\nexpires: Tue, 03 Nov 2026 07:48:27 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJCgH3jzQTAAwBuUwKEwH3EgAAAAwBT3/Y+AG3BgAAAA\r\nx-77-nzt-ray: e2f75420f52d388ff2921b69bcdbe81a\r\nx-77-cache: HIT\r\nx-77-age: 1258639\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":269534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28080)","md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:20.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globaltradecapitalltd.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1179\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://globaltradecapitalltd.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 17 Nov 2025 21:26:20 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-11T18:01:03.502341Z","times_seen":586797,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/jquery-3.4.1.min.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 19 Oct 2022 23:09:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30047\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-11T16:29:40.137796Z","times_seen":138860,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globaltradecapitalltd.com/assets/js/menu.js","fqdn":"globaltradecapitalltd.com","domain":"globaltradecapitalltd.com","tld":"com"},"ip":{"addr":"198.12.80.250","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:09.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globaltradecapitalltd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 20:46:29 GMT","end":"Thu, 22 Jan 2026 20:46:28 GMT"},"fingerprint":{"sha1":"41:96:57:E8:48:F2:0A:D6:04:09:AA:11:D1:B6:09:33:FE:06:22:0B","sha256":"4C:EC:99:91:47:5B:68:9D:86:29:F4:F2:EB:97:7C:98:21:00:B4:8E:68:66:85:43:2D:4F:F9:1C:55:E1:EE:11"}}},"request":{"raw":"GET /assets/js/menu.js HTTP/1.1\r\nHost: globaltradecapitalltd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/?a=support\r\nCookie: PHPSESSID=88a03d21e32a57b9e4bea0e85fe3f4c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 17 Nov 2025 21:26:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T17:08:25.98009Z","times_seen":148901,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"globaltradecapitalltd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/29887aa7a6e7ed4f1d36708df51b1f5c666dacad.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.194.241.68","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 01 Jan 2025 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:C6:B6:6C:12:F6:01:2B:C5:12:CD:14:1F:5F:98:93:35:23:E6:72","sha256":"62:89:5E:08:77:16:42:58:9D:77:1F:38:8C:73:AA:58:D5:ED:1F:1A:79:6A:FB:C6:2A:FF:C5:C1:C9:87:AE:AE"}}},"request":{"raw":"GET /widget/29887aa7a6e7ed4f1d36708df51b1f5c666dacad.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://globaltradecapitalltd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":116,"dns":27,"connect":21,"send":0,"wait":24,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 18:55:38 GMT\r\nexpires: Wed, 11 Nov 2026 18:55:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527432\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-11T18:04:32.132148Z","times_seen":79438,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtranslate.net/flags/gt_logo_19x19.gif","fqdn":"gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 01:13:19 GMT","end":"Fri, 30 Jan 2026 02:13:17 GMT"},"fingerprint":{"sha1":"A0:B5:F4:1E:19:9B:FB:1F:7E:CD:06:F4:E0:DA:18:6B:81:9D:A0:08","sha256":"4B:83:DA:FF:46:EB:CB:67:EB:CB:91:6F:7A:26:EF:20:87:EC:24:30:E6:C9:B6:45:2C:1C:7F:EE:FF:01:9C:6D"}}},"request":{"raw":"GET /flags/gt_logo_19x19.gif HTTP/1.1\r\nHost: gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globaltradecapitalltd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 21:26:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 625\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=864000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=633\r\netag: \"3950d-279-56ce71dc218b4\"\r\nexpires: Sat, 22 Nov 2025 06:18:48 GMT\r\nlast-modified: Wed, 23 May 2018 22:32:56 GMT\r\ncf-cache-status: HIT\r\nage: 486442\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5TbB%2FmsPF2f8ksibVJ%2BJ2LNwhb8%2Bdee9IaavZBY055TxHSC9ipfU0ZieeIx%2FbczPSCwzOkFIVz5Q2JNFfEFOJ9OPa%2F02POhcA%3D%3D\"}]}\r\ncf-ray: 9a024e0c0a990b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":625,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 19 x 19","md5":"057651faef8c976d632979b73c627130","sha1":"8d75b9de30163040e8cd8a3500c6fed67589c38d","sha256":"4017e081f64ffa65b7184b963d658253c0268c32d5409b90f78ce6de88cc7ba7","sha512":"e3b95b4b0dea2550a9bca87b1c35833128ba984aa42507c09d3985705ab182d3ad26cc16a328f54f9c82c3070df1faf40c0a35ea6e4a140607084a3cbea5d3f2","ssdeep":"","tlshash":"f2f041214ce0d240cb769ebc0a2f900c30a850aca05d8362e4d6762f1716f830039d9b","first_seen":"2024-01-21T06:34:56Z","last_seen":"2026-06-18T23:10:53.761603Z","times_seen":23,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":41,"dns":21,"connect":1,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.196.70.29","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://globaltradecapitalltd.com/?a=support","date":"2025-11-17T21:26:10.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://globaltradecapitalltd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3qCVfNT0sJBs5kJAmOvzkQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 17 Nov 2025 21:26:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: /pFT9p2GqeqdR7t1wYIAOrHF41Y=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":96,"connect":116,"send":0,"wait":22,"receive":2,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
