{"report_id":"e6f0b732-b8f7-467a-8905-b86b0e6dcd0e","version":0,"status":"done","tags":[],"date":"2026-10-07T18:21:08Z","url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"title":"1 new message","dom":{"size":41873,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4384)","md5":"f1604fcd8247496de22c682752d8d018","sha1":"695d75edcb7a56672791bd98e8c30ff62dbac527","sha256":"44dfd123023a6a997dd4e12fae3eea8c5de2d4ff1eaa022d9b1017ebf276415e","sha512":"6a873cc3ff3fc8bf0629c87792af3d4adc9991a0dc075aa9a0d142e77860ffc08ea64cea0fc643450fb2a02cef59c7784f7297e05d0175c73a16ffbb60e5120f","ssdeep":"768:QTmwLoB63vsHeIomhq/Z7+l7v6xk/0NgXO67z0tE0OF2HxOhcyqHAoj72zYBqNqP:aLoB63vsHeIoqq/Z7+5v6xk/0NgXO67q","tlshash":"24137360d4b0a03b010321f255be672d2fb5a30bd7131e6576fc17a95fcae968e2326d","dom_hash":"domhash1fe39516b4c6af487cba4d4e77467c06","first_seen":"2026-10-07T18:21:16.071288Z","last_seen":"2026-10-07T18:21:16.071288Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T18:21:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vsb31.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":977974,"first_seen":"2020-04-04T17:57:17Z","last_seen":"2026-10-03T11:11:36.355576Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":2,"received_data":44148,"sent_data":1093,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"turbo-arcane.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-24","domain_rank":0,"first_seen":"2026-10-07T18:16:04.283188Z","last_seen":"2026-10-07T18:16:04.283188Z","alert_count":55,"request_count":55,"received_data":1417099,"sent_data":30386,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-10-05T23:17:26.233129Z","alert_count":0,"request_count":16,"received_data":750391,"sent_data":8153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-10-06T04:42:23.268865Z","alert_count":0,"request_count":3,"received_data":6288,"sent_data":1698,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":6,"received_data":241922,"sent_data":3405,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e06929a28f14a7702cc1c90d59447ff","sha1":"2159efb8432c5c7416904ee6521c84977d5ab92a","sha256":"3149039a09921537fb8eb9e83dc09f9a4ee668c02c7fbd731fa2022eea921344","sha512":"f472aaeb8f7fb2fe7b571d29e0e247002d2cfac2ec7399f10a4372656299f109919c10bb864d5c4d3880d3d5c27b094bc39ae30fa52cdb55591b8607ee4a16a7","ssdeep":"","tlshash":"9f11ad6c1bba123453977127989f975c7734c9022513ee0bb82ca191af50d3269f6ed8","size":1075,"data":"","first_seen":"2023-03-10T10:46:14Z","last_seen":"2026-10-07T18:21:16.290346Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"8925055112ca3545ba1d80a7c6a719c8","sha1":"7fc35f9620c1b40a08f25372c07f76229ed86244","sha256":"44c68d658b80469bf860d81a1cf9d71d18dab098a7e86653ea5f5997249d1a33","sha512":"12f0f13f27816a7ab04a79bb3c1bf8ea00c7ea4493784bec5000740c2b70cbbade8f1a1dc3e1f1930afe6ae755a41a8666cc136e1ff2d7f2e11dcbb8f175023a","ssdeep":"","tlshash":"0ce0269d3a407e35a25395e754f2ee4c34b63028a545995099df8c492a9898ac428fa8","size":332,"data":"","first_seen":"2026-10-07T18:16:16.167703Z","last_seen":"2026-10-07T18:21:16.291021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"746fdbd734e1f55996e4be66dffcf0c7","sha1":"032f217e66795e8a757ea36f9266c63defcf9806","sha256":"c06bb1323f9e49398e42887c93219cd98e4954cdfad6042ae8a65a2324c86694","sha512":"1607cc3bfe46474c2e0b94ece1af5aa21c36e2f9934cd70f5bd75ce5f723159b13b814d59671e45ffc48fbe39e844f11c120994aef66e511c974a1dc4dcfbbaf","ssdeep":"","tlshash":"e1f0ab2938e234245397703b773f52403032201ba6668a193a3c8a480f389586a7b5bc","size":470,"data":"","first_seen":"2026-06-19T00:07:30.086031Z","last_seen":"2026-10-07T18:21:16.293825Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6213ba628ac20cc77eb7024f7cabe1f1","sha1":"2eaec63b6c6159b143543bf9308eeda8290e57b3","sha256":"618e0477cc84e1070cae18442757a02cc9d44fc447c8650cf7fd7a7d9d86941f","sha512":"d7b3f18fc8a5c36262b4d5465ba26a89be80f31a584302d7cd1dffd6f650278491994d081ee5cc4083e33a915a116b1c64e13cbff396ae6b7e9d667fca2a7dba","ssdeep":"","tlshash":"fbf06d091cf4b214b81b30616eaed4041729534ff80ebd85bc4d2a427f2e25b23f77a8","size":516,"data":"","first_seen":"2026-10-07T18:16:16.170079Z","last_seen":"2026-10-07T18:21:16.294414Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7d375d414f5f1b5f17d906a8f76cc1","sha1":"55b90ef862f7cdcf541a3a233f473ce369426ea0","sha256":"89321536a8ba0795b4c48d855c36f5259d3d3d503ed5bb03ae762c83032e384f","sha512":"9a0baa9d3bd3b0be527b3e3efbc54685443c53bdfda04b2a1327247bb861d748ec0caa3cc3861793d654a65cd03daeef7c5ecd2d8baf700b95ed7853004099d6","ssdeep":"","tlshash":"20f090091cf0b726642f7091aeaee105166d430ff81bbd41bc4d1a402f2a64f23f7355","size":636,"data":"","first_seen":"2026-10-07T18:16:16.171037Z","last_seen":"2026-10-07T18:21:16.295236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"201bf9c1ffe0fed64f646a1b97c44bf8","sha1":"b00c719aeed18e91dfa2c2abf494ce6fe32bb56f","sha256":"06c11752129fe8dbe763bf9617c2666afc2fb78baec68ecb06a245ae1bdc5120","sha512":"8d24f596a9316dd9dc00c9a13bc2c59e755c940968cfdd9bbf2a6401717521f35bc7970000fc46e9e16b8ae0406c4d6bc8de833e6e08b36e7eab4e113bb25341","ssdeep":"","tlshash":"4bf090091cf0b726642f7491aeaee109126d430ff81bbd45bc4d1a402f2a64f23f7355","size":638,"data":"","first_seen":"2026-10-07T18:16:16.1721Z","last_seen":"2026-10-07T18:21:16.296124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"52f88d15c8b999ddfef9f9c86f4caea9","sha1":"7cf08155a3f24a35379c33f789f329b96517a509","sha256":"cb323125f76e8cc12c1e4f8ce9f052588c67f8b192f56567a76cd414c4011a24","sha512":"0644659ca1ca2f5fad83a36c439ff47df4727f719ca27fb3221d64b8811a0f19a1bf1310fc5f8752592bb7f27145546f611af1727f0f70cc526d2f3de02dcff0","ssdeep":"","tlshash":"a5f0390a0cf87258645b30516eaee0041729530fe80ebc85bc4d5a406f2e20b22f3369","size":512,"data":"","first_seen":"2026-10-07T18:16:16.173017Z","last_seen":"2026-10-07T18:21:16.298859Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a6062a24285eb132bed5dac3d6ce502","sha1":"5502b127e28c5ebf8b985ff7220ca25c39cf10da","sha256":"8f32751dc8238502801d058dd023567fe6afac5ef2b73a5386c9aeffe49ce672","sha512":"8af729c1753c6c03915435fe45a01e9cc1193ef012705abae18cfa03a470499075e0250bcc8da2c63163beeedef6ddbb6aa607766cb1c9d7a2b4f6c27ead4774","ssdeep":"","tlshash":"1df0ed0a1cf47258b85b31516eaed0051729575ff80ebd85bc4d1a407f2e21b27f3755","size":507,"data":"","first_seen":"2026-10-07T18:16:16.173977Z","last_seen":"2026-10-07T18:21:16.299908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/jquery-2.1.4.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9b46216d2abbb1ad232ca631b095e77","sha1":"8aaa3c7481c4467583e932b96e5111ad34424def","sha256":"0a04309314bc19ddc15da0003187e7709d835d6c464e8ef95e50801944ff97c5","sha512":"621a1da4b51dfe77a7ea5ea780819089f3a53298d08ba7dc4ea378cee25b288bc09b667a188c0da2383cdab8321b4f84e491864e28c60b0bc7b23fbf5f4aaa5e","ssdeep":"6144:LYc1a9XN7rmJwsZ5zU9FjlR0eV9fiY12KMAjJ/kDABp8HN6bu4t:LYhsaFjl39xF8DG8HN6blt","tlshash":"f744c4d9734f115f87a2336ae43b6249fe7cd1b1520151bdb58d986c24a081883fafbe","size":256815,"data":"","first_seen":"2023-05-23T21:09:25Z","last_seen":"2026-10-07T18:21:16.079105Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","size":13016,"data":"","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-10-07T20:49:00.072641Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","size":3526,"data":"","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-10-07T20:49:00.14589Z","times_seen":1443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","size":215095,"data":"","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-10-07T20:49:00.0241Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a689b2c18a12b1d3ecebd75/1juk9sael","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0050d228ebab2e0d626c5344a102d952","sha1":"2571e3abf1280241f4d917811904578211d48f78","sha256":"8ed67322985fc22c27f7e0d92a17c2c4ce9ef712e6196d49e57faa13da2b5e9d","sha512":"5aa11e78024a48cb65eccdf0a4b74d3cf68ca412bdc7ff8d9c481bddc1833987c578919c8d97ad169f30bfa2ab6adbd4cf0f26b96f6fd63a77d7e14908dc55e6","ssdeep":"","tlshash":"1a2144f5be1a263bfa3140a96eaafa0934b2119b04081cc5470de8d5369077a161acfd","size":1159,"data":"","first_seen":"2026-10-07T18:16:16.103001Z","last_seen":"2026-10-07T18:21:16.111903Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","size":11206,"data":"","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-10-07T20:49:00.039398Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","size":4539,"data":"","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-07T20:49:00.054236Z","times_seen":1917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/bootstrap.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-10-07T19:54:37.285041Z","times_seen":29235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/wow.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a022a0108f3ff5be7c0b28f7cf95541f","sha1":"3c3e1b64989440ee80c3e2aa1d92ebb16be2b00d","sha256":"7142b0fab8e538b934b1b7d4153c756e82dfcd154627e96206dbc91a1741adcd","sha512":"9cc4980806a2d7fa856a00159d8a4d4aa5f1fedb1fa93898b78308853f65b232e32b95e7b1a17a77bf4a010fa0162d4952ee70e179a4d537711e9b5199dd0df2","ssdeep":"384:i0eg5rUHJM+rrWgRiP6MusxY9RUP2vcG8TS2Si3CpkLoRn7wwxAKX:i0e72JXZ7TS8CiLoRn7tAW","tlshash":"fc7230896a1920618e37b37ecf1f8109fb76053b1141c5687dac9ad46f7092583eaff8","size":16947,"data":"","first_seen":"2026-10-07T18:16:16.087365Z","last_seen":"2026-10-07T18:21:16.09278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/owl.carousel.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-07T20:45:00.868944Z","times_seen":71545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","size":325187,"data":"","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-10-07T20:48:59.978648Z","times_seen":1667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","size":10688,"data":"","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-10-07T20:49:00.089535Z","times_seen":1179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","size":9008,"data":"","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-10-07T20:49:00.039979Z","times_seen":1949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"WOW: animating \u003cdiv\u003e","filename":"https://turbo-arcane.com/","line_number":758,"column_number":19},{"level":"log","text":"WOW: animating \u003cul\u003e","filename":"https://turbo-arcane.com/","line_number":758,"column_number":19},{"level":"log","text":"WOW: animating \u003cdiv\u003e","filename":"https://turbo-arcane.com/","line_number":758,"column_number":19},{"level":"log","text":"WOW: animating \u003cdiv\u003e","filename":"https://turbo-arcane.com/","line_number":758,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"turbo-arcane.com/","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T18:20:31.211Z","timestamp":1791397231211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/5.6.40\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=kqpgem1mtr19lucr2hjivf9v62; path=/; domain=turbo-arcane.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure"},{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62","quoted":false,"path":"/","domain":"turbo-arcane.com","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=kqpgem1mtr19lucr2hjivf9v62; path=/; domain=turbo-arcane.com; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":20879,"size_decoded":5206,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"04f1792e4668ddbc7e087943bffa5114","sha1":"b7663e76e6133822d829407edfcec726b5df2d3b","sha256":"3c5b0b97ade61c2b47315ec5d807fdf14046619410b3e7d0612654b3d48d2b9c","sha512":"2aa9c6000432df0ca86e3afff54a5610c4a82a6318980b301a2935c051bd491404a58252e4d4f200de6409cd0883cde6a5d0ea2ffd37cca7593c737ea5ebbe67","ssdeep":"384:29SBXWRZWxdZIcWb1kAFJ5tN2j5o5V59SiSG:29qmAI4A/7Nq6jXTv","tlshash":"559251215cf0a123015360f11a699b0e2ff0e31bd42b6a8572fc8b851fe6e96dd6735c","first_seen":"2026-10-07T18:21:16.074982Z","last_seen":"2026-10-07T18:21:16.074982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":405,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/jquery-2.1.4.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.158Z","timestamp":1791397232158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /js/jquery-2.1.4.min.js HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Sep 2019 01:33:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 72218\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":256815,"size_decoded":72456,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e9b46216d2abbb1ad232ca631b095e77","sha1":"8aaa3c7481c4467583e932b96e5111ad34424def","sha256":"0a04309314bc19ddc15da0003187e7709d835d6c464e8ef95e50801944ff97c5","sha512":"621a1da4b51dfe77a7ea5ea780819089f3a53298d08ba7dc4ea378cee25b288bc09b667a188c0da2383cdab8321b4f84e491864e28c60b0bc7b23fbf5f4aaa5e","ssdeep":"6144:LYc1a9XN7rmJwsZ5zU9FjlR0eV9fiY12KMAjJ/kDABp8HN6bu4t:LYhsaFjl39xF8DG8HN6blt","tlshash":"f744c4d9734f115f87a2336ae43b6249fe7cd1b1520151bdb58d986c24a081883fafbe","first_seen":"2023-05-23T21:09:25Z","last_seen":"2026-10-07T18:21:16.079105Z","times_seen":59,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/light.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.494Z","timestamp":1791397232494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/light.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 244\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":244,"size_decoded":508,"mime_type":"image/png","magic":"PNG image data, 2 x 39, 8-bit colormap, non-interlaced","md5":"260bc7cfb03c25204edc7011bf4e7da9","sha1":"1c1c9a738aea52f906b31574b22eb7c9c5330454","sha256":"ad38ed3096d69493a16e6855ed3cbbf99e68a7c99ed5aafb2491cc308d52f23a","sha512":"fbbb4656a3eecb3bae34ad8e945217a95a1e9cd806f3c94638385e845eae45d8fa86ea1f579027e699e0ba3431d2f2e535b78a3393640e28f06970d7ea1ecd5f","ssdeep":"","tlshash":"ccd022c169aa2f27b904239ba210982096a31e6c229060234c02f2681db2a0c0354382","first_seen":"2026-10-07T18:16:16.150622Z","last_seen":"2026-10-07T18:21:16.082856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.654Z","timestamp":1791397233654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"0bd462f8b42caa969e21b8e4b2662c5b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba6593bb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10688,"size_decoded":4558,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10687)","md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-10-07T20:49:00.089535Z","times_seen":1179,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/wow.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.162Z","timestamp":1791397232162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /js/wow.js HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Sep 2019 01:33:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3945\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16947,"size_decoded":4182,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a022a0108f3ff5be7c0b28f7cf95541f","sha1":"3c3e1b64989440ee80c3e2aa1d92ebb16be2b00d","sha256":"7142b0fab8e538b934b1b7d4153c756e82dfcd154627e96206dbc91a1741adcd","sha512":"9cc4980806a2d7fa856a00159d8a4d4aa5f1fedb1fa93898b78308853f65b232e32b95e7b1a17a77bf4a010fa0162d4952ee70e179a4d537711e9b5199dd0df2","ssdeep":"384:i0eg5rUHJM+rrWgRiP6MusxY9RUP2vcG8TS2Si3CpkLoRn7wwxAKX:i0e72JXZ7TS8CiLoRn7tAW","tlshash":"fc7230896a1920618e37b37ecf1f8109fb76053b1141c5687dac9ad46f7092583eaff8","first_seen":"2026-10-07T18:16:16.087365Z","last_seen":"2026-10-07T18:21:16.09278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/logo3.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.195Z","timestamp":1791397232195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/logo3.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2363\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2363,"size_decoded":2628,"mime_type":"image/png","magic":"PNG image data, 70 x 79, 8-bit colormap, non-interlaced","md5":"4690852fd4cbc428c4aaf22cb3c52322","sha1":"9b4801c6db18778b3253004d210eb0429fecbebf","sha256":"13deeb594846b1d5003f37bebca5013c1ba3a70b2fd39e9d8fdb71c84710e11f","sha512":"1df69c5a1324910cbd73ec4b9f0e26d90fcd7f1aeaffb0d88adb97de756a0c0ba8a8e9edf9e50a6b5808efdde2df05d917f907a2d76df38e104f7247dee02645","ssdeep":"","tlshash":"4c4117839ce08538312b120bfcc2ba75e970156f8e16542fd384aeeacc1f2f42806677","first_seen":"2026-10-07T18:16:16.090915Z","last_seen":"2026-10-07T18:21:16.095176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/plan-title-after.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.196Z","timestamp":1791397232196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/plan-title-after.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 233\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":233,"size_decoded":497,"mime_type":"image/png","magic":"PNG image data, 82 x 10, 4-bit colormap, non-interlaced","md5":"bec77e5f4081974e82c7a8d5158935c9","sha1":"4fab918952cac8dad97db354fc6e1b85d1e2b1c9","sha256":"045a90dfac32d6ef20570fdca30a7f9b84bcec621558ad397fb770512cee189a","sha512":"b373bcfc85f57fe82bb5f37ad5b89d9a9a1564e839493fa070f10510e97d63f0752cf0e1297724504ba96bb69a46fe92c85c29092c820d9ac5c519d061daede8","ssdeep":"","tlshash":"2fd022db5fc3cf2582811377c3f44a4999e2313aa02d38364a444e3e2a520ac98ec0c3","first_seen":"2026-10-07T18:16:16.146745Z","last_seen":"2026-10-07T18:21:16.096766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-2.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.207Z","timestamp":1791397232207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-2.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20589\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20589,"size_decoded":20855,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"4147e561dd65ae287c5f3b6eeda09e40","sha1":"daa56064602032e82c91e204cc5834ee0fa5216d","sha256":"a09ef7d04278c0740efc1c6786d7305b70b31a7005dc49e1c5d2102ff5c5c7aa","sha512":"3edf56ed24abd21e11c9d5de704bd2b0627a7fc4d1b2fe4a127e230f6d13235f73fee274001a3c3cd44f968378d138018c7818faac9288f3715ecf815bdb7187","ssdeep":"192:0Ss4ktkmoZUraAiPvvcfSTF6MnfCZs9uAkgyum:zStk9UOAwTFnnf4s0Akvum","tlshash":"20924a64acf13290941de4392ea4200a9db30687dec5dc09bbde8c277f21bde5c6f691","first_seen":"2026-10-07T18:16:16.132703Z","last_seen":"2026-10-07T18:21:16.09864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/honey-drop.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.496Z","timestamp":1791397232496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/honey-drop.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22362\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22362,"size_decoded":22628,"mime_type":"image/png","magic":"PNG image data, 1349 x 280, 8-bit colormap, non-interlaced","md5":"1ddf29abcecffbb66cdca52189f98cce","sha1":"9a8bdf4f9f1673f6d7be73329c631b005d53228c","sha256":"0e8e17504a23e0032342e1312a8d65e2438ef24d20fdcbe47f790294903b8037","sha512":"586f25d149efa35ec9f9d0cfd4a11b392cb7af76c0f24dc8c2a8532f882b41c383eef70d45b3994500f13f3f668739d85b17a6a9dab77afaaa6f6d7e758de367","ssdeep":"384:N+ozhJVXHmUoaNzDWlNbyVcBP/3qmwo4jyfbBxfUgzhERt87/LFBARLrellyR2gy:5hnWU9zDsNueBPzjfUzR4LYLrWUs","tlshash":"63a2d0cfe0e5c8af2589be6e10042de3ed4a23051d48f5bbcf9d8891986a5ed54c7683","first_seen":"2026-10-07T18:16:16.068139Z","last_seen":"2026-10-07T18:21:16.100702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/fonts/fa-solid-900.woff2","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.691Z","timestamp":1791397232691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/fontawesome-all.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50372\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50372,"size_decoded":50639,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50372, version 1.0","md5":"8a8c0474283e0d9ef41743e5e486bf05","sha1":"1ba4dd60af529d1a72d0e57467c3bc0bbb728a4d","sha256":"cbbca7d9888b4a9eab7d479756d2924f9b067fd38dab376797029df741f96ee4","sha512":"fa863fcb24ff1d83f7a2c2b04ea1758eaf589bbfcbfac16dd33d63aa9d6a447ce2e11204b21790fb2eb5243b2f82ab9c5dbd8c4cf25f5396480a13a482291661","ssdeep":"768:lWY2fxJ3cMiwNG+JHSMegpCKqhlcL8GTmM8XHKwD8pVdc9D9FneRk6TQi2g9uDII:sxVc2YEHS3hE8pj7eVi4k6Tt2g95Ho","tlshash":"d233f173e8a60ff666bef855a6c0072668a9051528daf4af4c0b0769f91cd8703f50e5","first_seen":"2023-04-07T08:59:30Z","last_seen":"2026-10-07T18:21:16.101639Z","times_seen":2937,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.659Z","timestamp":1791397233659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"09a8a4df0fbc87c70a3579eb083e45cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba6593db505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3526,"size_decoded":2167,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3525)","md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-10-07T20:49:00.14589Z","times_seen":1443,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.788Z","timestamp":1791397233788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"720e14524f21b150f8b0a7f9f9d9f978\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1073125\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a46eeba72d2c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21020,"size_decoded":5396,"mime_type":"text/css","magic":"ASCII text, with very long lines (21020), with no line terminators","md5":"720e14524f21b150f8b0a7f9f9d9f978","sha1":"6e05d7727d0e572d79e5b9b660e84634a95226dd","sha256":"1e270e730a76ba5e8e438bc8c6f263d1b7d69895cbe1565983f68ce9cbe8fa4b","sha512":"e838082c1cb6a17a08e6cf09f30b50f128ec7c4fb6ab53f506d2ab295dcb6b01a59c69770e22f561ba393158390ab4fe1b63e548849ab4c954cdcaa6cc784cba","ssdeep":"384:gwaDBMbrYbv+esY2jcWlnrCxN82TNSixi7rg64gpjnKSp:gwa0UAg+J","tlshash":"1b92ca93b5a314dce297c632d0d1f67ca83f4a20c757c9a7b5037bb88a91ad73641a4c","first_seen":"2026-09-14T08:43:43.682132Z","last_seen":"2026-10-07T20:49:00.015456Z","times_seen":1500,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-4.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.202Z","timestamp":1791397232202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-4.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9013\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9013,"size_decoded":9279,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 146x146, components 3","md5":"acf9841cd7a52de74718e4bfa2d6f201","sha1":"b9b643d8a825019c8f02d7b9efecb4ea4dc184e5","sha256":"92d697adbb46ff8d9433668e378cac4e45377cdf877b5b369a94f9592347d137","sha512":"d101a965f25dea0e5e9263c743ba9780771d1b63b2240ea4b3ea975e2052bcc8315bb38150385b0f240f1bf6157604df67990a57f2f926ae5c36c4886780a2e4","ssdeep":"192:rYCkbHCjeqLa6LflMg9wq6QiqoNr97h0Ye6fwkQwAdVLm/h:pSHKta8hwqnoNFhP9QwOVLmp","tlshash":"4f02aebfeb53308afa4803f0d5231aaa3ac074031535952777a742c3187eab165b7939","first_seen":"2026-10-07T18:16:16.109073Z","last_seen":"2026-10-07T18:21:16.110387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a689b2c18a12b1d3ecebd75/1juk9sael","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.543Z","timestamp":1791397232543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /6a689b2c18a12b1d3ecebd75/1juk9sael HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6ab62d2918b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a46eeb9f8fe5b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1159,"size_decoded":1198,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"0050d228ebab2e0d626c5344a102d952","sha1":"2571e3abf1280241f4d917811904578211d48f78","sha256":"8ed67322985fc22c27f7e0d92a17c2c4ce9ef712e6196d49e57faa13da2b5e9d","sha512":"5aa11e78024a48cb65eccdf0a4b74d3cf68ca412bdc7ff8d9c481bddc1833987c578919c8d97ad169f30bfa2ab6adbd4cf0f26b96f6fd63a77d7e14908dc55e6","ssdeep":"","tlshash":"1a2144f5be1a263bfa3140a96eaafa0934b2119b04081cc5470de8d5369077a161acfd","first_seen":"2026-10-07T18:16:16.103001Z","last_seen":"2026-10-07T18:21:16.111903Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":7,"connect":14,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bg-4.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.563Z","timestamp":1791397232563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bg-4.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 153906\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153906,"size_decoded":154174,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1349x1826, components 3","md5":"771ace657965e618deefb85b4861f247","sha1":"fa13f7e4fab696b81a21b84ffab1515ddacbef84","sha256":"814a4dac31467bedcbca4de503e4e29a20a3f2de14fa7b5b2eb2a00a4028ebbf","sha512":"3f5776dbf09b73daa0d9e5ce0a896ccd42963419e6531d27c3d1521c73b2abf847b7d4266272a0a3e7d3ace193aa86e1c12cf69257628d6482f5eb77f1be6576","ssdeep":"3072:oxpvZQWgQWLSHIOLy1IX4aEGwpQ364yIq0F1M4nQK:oxRZVgvSVLYIXpw4q03Ma","tlshash":"a6e312cf9f27eb11d2cb77320efb62021f0f861c31137512de2d9196ca19563ba559a1","first_seen":"2026-10-07T18:16:16.103996Z","last_seen":"2026-10-07T18:21:16.113197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.969Z","timestamp":1791397232969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://turbo-arcane.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 178\r\nOrigin: https://turbo-arcane.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":178,"data":"{\"p\":\"6a689b2c18a12b1d3ecebd75\",\"w\":\"1juk9sael\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://turbo-arcane.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"BVsN6ut62Sx_KtectVHBt\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-r8lm\r\naccess-control-allow-origin: https://turbo-arcane.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a46eeba308b4b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047,"size_decoded":1422,"mime_type":"application/json","magic":"JSON text data","md5":"5abd92099988ab153b8b3ab44c158d08","sha1":"be54b1568104d80c6cdd1f4f3c4bd195f47c582b","sha256":"7c8919a180cd75da008b88d97c4e566c8f0ceaecc2d60d2993f1f8a1561b160a","sha512":"cb695ff3ca37e2957e31e93c46fc173392c55907a8cc86db6bf35ff5dafcefe9c4dfd308b0f7e060c277c5e6e6724819aadc1cdfd0059e0cc5803d8ca68f1a06","ssdeep":"","tlshash":"9511a8521e4f0fbe763672862a52af0811dce261b984145dd2c69d1639a53be100257a","first_seen":"2026-10-07T18:21:16.115462Z","last_seen":"2026-10-07T18:21:16.115462Z","times_seen":1,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.971Z","timestamp":1791397232971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://turbo-arcane.com/\r\nOrigin: https://turbo-arcane.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-xn2b\r\naccess-control-allow-origin: https://turbo-arcane.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a46eeba20874b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":714,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T20:41:02.279019Z","times_seen":18923476,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/animate.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:31.901Z","timestamp":1791397231901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:19:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4120\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57095,"size_decoded":4429,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"cb67371414710491ee3730390d1efb33","sha1":"2e70ccc82e0ed3de2fd87409e6ca66e7b1a2d285","sha256":"59a1460df6cb458204ec993345ff4964fa7e1a77da4ab7137e50fce8434c1d6a","sha512":"71e59a86d6fd6eeb01a5bd306e2a7cd3828dcaff64629e6318d384443288c8ea261bd954ced6bb20ed27d1b81a565bb3258c5e8603522b0042e3cd17b4c472da","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvq:LIW6yQ","tlshash":"e443d96929a1104466370a15c7df9e78663ce2a31866ecffb3d2548b8f41fac23cd617","first_seen":"2023-04-05T14:14:46Z","last_seen":"2026-10-07T20:40:46.589074Z","times_seen":11009,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/style.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.151Z","timestamp":1791397232151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Sep 2019 07:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7174\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40866,"size_decoded":7483,"mime_type":"text/css","magic":"ASCII text","md5":"dc74bd361984caff4bab8364e5f43a3e","sha1":"087ad706fb668a65e564585421bb1ba6172a8834","sha256":"98df2e40f98ac716f2ef9d5525eaf469b109c047ca703e49907ab96803d06bc4","sha512":"d1b4cb47fa8e886d88b8ba611843c61abd0cfa9f8cd574175dfd34656cfbd46d8853f51d9a1991817bd6d3cf92c591f6233ea73accf221ae6cfef2d67711b170","ssdeep":"768:9LE0cAu/fGqil395rFelZjnWPFiXJk5v0IFLj3:9dV4Gqilt5rFelZjnWPsX+5v0Ihj3","tlshash":"23032117b6543c8ab11be5e8fe55afe5571e0013de0f0eaab4a574bcd38d0d802b2b49","first_seen":"2026-10-07T18:16:16.107866Z","last_seen":"2026-10-07T18:21:16.127526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-5.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.193Z","timestamp":1791397232193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-5.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 915\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":915,"size_decoded":1179,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"026619eabb7ee038939c5a4b17f19466","sha1":"88e7eaec9859a40aad6440f999419dbf2f350057","sha256":"d1765a18618793ae2ae9948b1fc64395fd4ce3d05c0fadf30ffba5b5011b3094","sha512":"2a8addd5693749eb7e4371d25539e8ffc41b271f17803e5d64cb4a0e7b55c83349212fd2ca683f694d1130a5077a0cf598bda29f1545a075c0966494a69a5203","ssdeep":"","tlshash":"411170b416a1d6a2b6dc00454f458aacaaa21ee3c92d6b12119470b9c9bd70ce190880","first_seen":"2026-10-07T18:16:16.059827Z","last_seen":"2026-10-07T18:21:16.128976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/honey-holes.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.491Z","timestamp":1791397232491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/honey-holes.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31292\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31292,"size_decoded":31558,"mime_type":"image/png","magic":"PNG image data, 610 x 607, 8-bit colormap, non-interlaced","md5":"68679488ba759fe5bce0ac559b47f47c","sha1":"5d6f25cad8caf103ef25b3832ec2bca8e83ddedd","sha256":"f43c4717f3a195d8fb9b0b51a88ac1eff91a96e309d488e9f16ed005aae2caa3","sha512":"642a22d5153a57841e2306cf37a5afba1dc10e923fb68df4c6867ba6b98781567ab6e4c39d10383a3cf1b7d74b72af17f9568510ab034a5347a9f8f752751159","ssdeep":"768:/oS+eS7UOMHJGCZufEtn6lufnMvjz7/ef1zmVLLbPnEFfx+HDx:/duUO/AuK6gfMvjOIVL/PnEKHDx","tlshash":"27e2e1fdc147a837a846760fe98e6a3ae6d20732379367cc7ad1dc93151412c485bb86","first_seen":"2026-10-07T18:16:16.162427Z","last_seen":"2026-10-07T18:21:16.130926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/honeybee-fly.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.565Z","timestamp":1791397232565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/honeybee-fly.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8162\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8162,"size_decoded":8427,"mime_type":"image/png","magic":"PNG image data, 539 x 165, 8-bit colormap, non-interlaced","md5":"ae221067614cca0c504b3aef9d492560","sha1":"9a31d6733c4aedbeac96ceec7012580e9829b13c","sha256":"1f12c9bd95420f54b7bff654ce2d154c09636c63af535b68ac550c0bcbf1ffd7","sha512":"23f95e93d8d657d33744a2972f003de396b96e228fd7189c05a7c3d1e9c9db0a514726b75cc51b7a2cbe7e15e1c497693cc78bc0321efeebb23675d54d482b3e","ssdeep":"192:i8vZCEBRl8RU6IEBG8LWdY6Ur8CLIXrf+nxE9sV1Bcu:i8vZC0lz6/w2ZrpoLyK+VN","tlshash":"9ef19e16b3448f20c689c6ba2519f5e75622bfd6c9007057b311bbbec0bd148e6804bb","first_seen":"2026-10-07T18:16:16.071719Z","last_seen":"2026-10-07T18:21:16.132807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.963Z","timestamp":1791397232963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://turbo-arcane.com/\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"493ec326a306857e053b535118af1c2e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a46eeba2086fb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11724,"size_decoded":4419,"mime_type":"application/json","magic":"JSON text data","md5":"493ec326a306857e053b535118af1c2e","sha1":"97f86770a684f19cd83aa09b4a4bc6ec36a6bc4d","sha256":"913049c2bf5844e4c5ca76465bb8270066a409cc5c883f849ebc43bc2a7352ff","sha512":"908e18919f2f0c87e24aaf1ef30610ac22b730b33ab27e796b69ec531f6b19850b3f98b261e150e4bcdcca4f504ccce1071602460be8a5255dca2a04f69c08be","ssdeep":"192:Om265/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:4CbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"e8323169ce504ea702d29646389f35437624819b1f54382eb78c91ac0f8ec6f62f77ce","first_seen":"2026-09-24T04:33:32.436701Z","last_seen":"2026-10-07T20:48:59.997518Z","times_seen":1707,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.679Z","timestamp":1791397233679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"a5911fd0628b3cf5cec05686e05ab9d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba68949b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":3918,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4572)","md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-10-07T20:49:00.039979Z","times_seen":1949,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/owl.carousel.min.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.148Z","timestamp":1791397232148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:20:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 993\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3758,"size_decoded":1301,"mime_type":"text/css","magic":"ASCII text","md5":"6b72a5460883d653a912c75a05f23067","sha1":"f712f2183d2b70ddc779dd0e1b2784944a766fdb","sha256":"6840a6c5e5bab640597edbe41191b97e9d3a647929a6ed2ea41d4cb20cb94c9a","sha512":"6e8d3af1218317aa8ea62913245e3d5f6dfb715256541f6fbad8e83fc082b54abe4c940498383fb9c30c593bd046fbd407015007f8535bdcaf77cf9219548229","ssdeep":"","tlshash":"8371cce0302a290e590e93a51ded4b6a7b3ec811dc1a0c5a91f75b1e53cdeac112fb5f","first_seen":"2026-10-07T18:16:16.110377Z","last_seen":"2026-10-07T18:21:16.139911Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/logo1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.186Z","timestamp":1791397232186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/logo1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22227\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22227,"size_decoded":22493,"mime_type":"image/png","magic":"PNG image data, 175 x 130, 8-bit/color RGBA, non-interlaced","md5":"8186d10eb9acf6519aa132a4ed47cdce","sha1":"dbe9f42613e7473367c94087f7aba32739c4d422","sha256":"462805cce6c057319a5a065c656f195d27baa2f40f95db1710221eadb600bec3","sha512":"c12ef1aba8d8282204ef0578dbc1a292914f3b9a80f56d6def53f8cdba6312efcaec335894d27f63fc4bfe82e4d173b8fc710b7683fa6691f25692d9f7ea4282","ssdeep":"192:LSgktq5BA5quxA6QfEntcGx6CCI5GtnoAPTRzt83DYHogs:+btq5BA5/ifgcGxiwGK6TRza3cns","tlshash":"eca25a52bef03d618c49a2b64ee114499d370e83e8c1bd46b9ec8f5a2f6179cdc0f180","first_seen":"2026-10-07T18:16:16.153477Z","last_seen":"2026-10-07T18:21:16.142959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-5.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.204Z","timestamp":1791397232204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-5.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26926\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26926,"size_decoded":27193,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=710, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=920], baseline, precision 8, 146x146, components 3","md5":"27051c46e5e9ab7bb66734d0979bf3f0","sha1":"dd697aca88e90a22c52c24adafe1dbc516a50c08","sha256":"21820e4ba786a7b268bb5976776e7d0675c1d5d2e8211a25cc3de89dc8c81287","sha512":"d6abaab6aefde4694f25c62374440f046cf503bc405c6f64024b364aeef2a782681b30a391426199fa988616f0463ae061ab687155adc32616aea827cc1f12ca","ssdeep":"384:/gkUcv90V7YbgkUcv909nux4j8YSG0mXYoWiLLYIh1iULxqa:r90V7w909lIwDbxqa","tlshash":"d1c2aeb89b14cda5fdd81235d8e0e2015722cd52e7e35e537a0c78483bb53a2a86c67f","first_seen":"2026-10-07T18:16:16.092159Z","last_seen":"2026-10-07T18:21:16.147037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.205Z","timestamp":1791397232205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16998\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16998,"size_decoded":17264,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"9c7ec8f04c81dc34879f9a6c353a1f87","sha1":"d24220b06e2c28e6ec3ad77bb90d56c09596fdc8","sha256":"40433ba359a211630aee01a7cb4d80418547cf3f4bc0699b3c315bf201784ad4","sha512":"cecf09d11c3f98178cd175c3402277f68ee4cc9b195666cf3e21a4352556f0f824b5c8bd44b86df617a261e846c848324e87325f4ef33784bf5b691f3783831e","ssdeep":"48:fu+k29W8sEvjxN+Y9i/rEmgBCNpiLHaac9AU7elB4UCN5p92Tdb0pdyHK8wSXxNa:TkEWR+xNXO9ac9160amdowI0d17ADKo6","tlshash":"0c72e674fcf176958a4892322e88280a9c7347c3ca809d85b6ce8c666f11f9d5c6f2c6","first_seen":"2026-10-07T18:16:16.074941Z","last_seen":"2026-10-07T18:21:16.148828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.570Z","timestamp":1791397232570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:42 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181670\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-10-07T20:08:54.501738Z","times_seen":67896,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb31.tawk.to/s/?k=6ac68d71090f835747053b99\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTY4OWIyYzE4YTEyYjFkM2VjZWJkNzUiLCJ2aWQiOiI2YTY4OWIyYzE4YTEyYjFkM2VjZWJkNzUtXzB1MmRjTnpxRDJvWXFiNGU1Sm5VIiwic2lkIjoiNmFjNjhkNzEwOTBmODM1NzQ3MDUzYjk5IiwiaWF0IjoxNzkxMzk3MjMzLCJleHAiOjE3OTEzOTkwMzMsImp0aSI6IjVOc0ZSZ3Bfekw1bkFpWHN4QjFoSyJ9.xa8kIiomFT1U9I5UcB66HErHRtP52O0Z0ijo9rNY-lM4JE3XCbhwPtHWCf1rs0zKVsiqwJNXn3pVEZgOqJui9g\u0026EIO=3\u0026transport=websocket\u0026__t=Q4Nc8Fl","fqdn":"vsb31.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.662Z","timestamp":1791397233662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /s/?k=6ac68d71090f835747053b99\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTY4OWIyYzE4YTEyYjFkM2VjZWJkNzUiLCJ2aWQiOiI2YTY4OWIyYzE4YTEyYjFkM2VjZWJkNzUtXzB1MmRjTnpxRDJvWXFiNGU1Sm5VIiwic2lkIjoiNmFjNjhkNzEwOTBmODM1NzQ3MDUzYjk5IiwiaWF0IjoxNzkxMzk3MjMzLCJleHAiOjE3OTEzOTkwMzMsImp0aSI6IjVOc0ZSZ3Bfekw1bkFpWHN4QjFoSyJ9.xa8kIiomFT1U9I5UcB66HErHRtP52O0Z0ijo9rNY-lM4JE3XCbhwPtHWCf1rs0zKVsiqwJNXn3pVEZgOqJui9g\u0026EIO=3\u0026transport=websocket\u0026__t=Q4Nc8Fl HTTP/1.1\r\nHost: vsb31.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://turbo-arcane.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nSX014e5U6p8Qz34Ffttrg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 07 Oct 2026 18:20:34 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QsCq5AgcnMVpFMoSX4/yZW68Prg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a46eeba6ace4b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T20:41:02.279019Z","times_seen":18923476,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":20,"connect":17,"send":0,"wait":563,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.188Z","timestamp":1791397232188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 764\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":764,"size_decoded":1028,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"448d618a78d9252e253d0a4d9aa38b92","sha1":"ea760ca46409a12a58252e83e843530424d1bd19","sha256":"ee8b2514131cba1c9bbad0294c74080b7886bfeda6a0a9164a517f14865f9192","sha512":"f30b80273cf39b059edac5381f00bbf6426b3215f139c8ff22e92f290d609660bb5079e3bc8e3ef9fa4e5c1e446628f9e4bb7a5c1860dc47f9f71df279520329","ssdeep":"","tlshash":"5901b7f894670e100a4a581b4831757c02774c18d181880f9306fbaecf71665a79015c","first_seen":"2026-10-07T18:16:16.100614Z","last_seen":"2026-10-07T18:21:16.154687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-2.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.199Z","timestamp":1791397232199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-2.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29280\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29280,"size_decoded":29547,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:09:17 14:14:33], baseline, precision 8, 146x146, components 3","md5":"779030c49ba8e8f313aee59fe617ca7f","sha1":"e1a143acb5c1b619e047efa382ad05ccd5d36f79","sha256":"cc3971fd0c935a571bc44d212c2775201097a136418a6d828c0a77ba9d427994","sha512":"fac9db3ad19d02bfe77298d80d33d75ee8fe0557630d40428c118da3df4f36370c9bf7dd765604eda61c6ec9567c42e6f2f63d29b086d75454980a706d162e1d","ssdeep":"384:daTV7c17YfaTV7cynm0HiOYNg7nGepp+vJu8/+uV3SjESXgJc/h2mn:0C17nCyHYyKqeJ9Sqc/1","tlshash":"d9d2af98eb14cd73fcd69ab5a6d2db96a7311e08a35322433c4d2d823b367e51d2c325","first_seen":"2026-10-07T18:16:16.096913Z","last_seen":"2026-10-07T18:21:16.158506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.678Z","timestamp":1791397233678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ed6ca00f1050102e4e4ce885305432fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba67947b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215095,"size_decoded":74897,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-10-07T20:49:00.0241Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.694Z","timestamp":1791397233694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"3b65489e3df378341353ddc879819d4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba69950b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4539,"size_decoded":2606,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2159)","md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-10-07T20:49:00.054236Z","times_seen":1917,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/themify-icons.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:31.908Z","timestamp":1791397231908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/themify-icons.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:20:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2659\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16516,"size_decoded":2968,"mime_type":"text/css","magic":"ASCII text","md5":"af3af1bfc6cfcff25f4a5264dd8d04c6","sha1":"9fc2b1e65fb8819d696a4685d3d0d6bdcfc3aa81","sha256":"79a6d496e4b3cfffb581260f2dd3899118db814ae376da38bc7d04dde4923899","sha512":"5727621d95f31477e2bf14d1dff159680a183c34afc5127a2330793680590660334d1d2acab44a97a1708ebfe354e5330cdb618a83cd120abb1a8055072c13dc","ssdeep":"192:QGl5CC7huMqJ5UmejPz35E3r4F5cvOAtH:DCsEDy+3HvJ","tlshash":"3172eda49d0f3caa6795e0c16b447a195b0da738de822c6fd113bd3cbbd3a11d6c42d8","first_seen":"2026-10-07T18:16:16.078962Z","last_seen":"2026-10-07T18:21:16.167206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,500,600,700,800|Raleway:400,500,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.146Z","timestamp":1791397232146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Montserrat:400,500,600,700,800|Raleway:400,500,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 18:20:32 GMT\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18820,"size_decoded":1540,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"385e61b2eab34d714a6eb868c9ca3d72","sha1":"893bd8ef522a14dd28cb407d110cde0934f2cc56","sha256":"266e879ac218f73f35134a0e7ac067a09953f750266fa76e2bfeab96754f410a","sha512":"88ab22a203a868c4008bcb03c8a639f85c821174d0378c1cee874752d7d201ee614008edb3605c0598de75c13b69d70fbbbf129412f46ea031cbba7866c58c9a","ssdeep":"192:YRo7TbOCuwRv7M0OxupRS719OYu6RB7W+OfuTRU7XPOOulioTRH+D69ivTiH9DpH:4Q7THavdLMvSt8bcZwfKJmf2RN","tlshash":"2b82bb900417d500eb476cc923cf7f36ee4e21167495c57aaffe18a8aceac261364b2d","first_seen":"2026-10-07T18:16:16.105817Z","last_seen":"2026-10-07T18:21:16.170626Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-6.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.194Z","timestamp":1791397232194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-6.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1034\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1034,"size_decoded":1299,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"57a4132269088b446b25f3c5a9e7c4e1","sha1":"c4b0696d73c01f4bcd29101726feeed838292470","sha256":"c3e778aba25b39c8222588f02496aa5fc1908058fe683ab417a7e10f61dbd05b","sha512":"b01c25a65a8b908219c9b5ad46401ce0602ba6891a0998c787cdcbe7310ccadecb07ebaba411904cbce503c1be4e032e5a5940a080725bc8ff9fb3e8e1cea83a","ssdeep":"","tlshash":"e811677259772b35c4a53e09b358d85072a63f041a3b66c2e44cbb6b03317341de85e5","first_seen":"2026-10-07T18:16:16.131611Z","last_seen":"2026-10-07T18:21:16.17328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-6.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.197Z","timestamp":1791397232197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-6.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6783\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6783,"size_decoded":7049,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 146x146, components 3","md5":"cd1c37107949abe1a14ff0f20878e2ba","sha1":"4026b1372c92ca5fbfcbc1dc68e3b364d516dacc","sha256":"c974fd2f8ea6b7f5c7d403ba8010a76de62035022cd15fbc61f38d5ae64ba8c5","sha512":"2d320de02e2f859e8d3df38b5668db09fd037b484ccb1182951a64222e247f8bb2ac5f25ad13e7d528c298b3f915614d5578158013c87ea2eb6cba584b3e66fc","ssdeep":"96:YIeOQ8iWMiAOp4dWqKXO2/S4p7pCzBB5g4988Caw6I3EvBBnymYr/GqDUsG38lMY:3eOQzWebWrSkpCcdaw5Uv/fYr/RlMqGK","tlshash":"ece19d54a81cb50ad439f3bb0f512abde27e498c158203df20e892d6cdcb66124ef5ed","first_seen":"2026-10-07T18:16:16.073876Z","last_seen":"2026-10-07T18:21:16.178701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-5.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.210Z","timestamp":1791397232210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-5.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16810\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16810,"size_decoded":17076,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"896a0a65d259b2cd812a04bbb3920486","sha1":"60105838b669338d7afd2b2f4a91c03f92ecce17","sha256":"fc5a6b9350efa691c51f042f291864c358e612d5f6478e978e2eb89687779ee0","sha512":"f9562bef72526172bf15e43d063dcad50bb5f7e14cd50e8ec3e4288d3b7f426f25a62ce4acf43ddc8e0133853d17306aac0b317b794708e7d9e32ce77c2e747d","ssdeep":"96:QkEWRoxNXR4kZZCcX1VG8DY2Rm6boCgNkkCU:QktmbNlG8jR90CgyRU","tlshash":"70721924ecb679e05006a3321dd534459c334783d580dc86bbce8867af22be88eaf14a","first_seen":"2026-10-07T18:16:16.111289Z","last_seen":"2026-10-07T18:21:16.187232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/certificate-arrow.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.504Z","timestamp":1791397232504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/certificate-arrow.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 277\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":277,"size_decoded":541,"mime_type":"image/png","magic":"PNG image data, 18 x 31, 8-bit colormap, non-interlaced","md5":"34b742f9f2f3263e59de3f8e73999620","sha1":"34a388691a64bfe8b66334affb9248a472b3f5be","sha256":"ebc068f277ac68c64b2652c20cff09323c585e37310600de5da23b4ee15ac40a","sha512":"2952bed3eed87afb9ac245a6505eb307c327cae2a28d2124e99c005eb58a43787d017ab4331352ac957fdb9f906cfd987a3fd1f50e259e49803a11079743178e","ssdeep":"","tlshash":"9cd0a7e66864ff61a10762fe86554418b864d82496e0550750c5dcf48b20208a185612","first_seen":"2026-10-07T18:16:16.133991Z","last_seen":"2026-10-07T18:21:16.194627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bee-1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.500Z","timestamp":1791397232500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bee-1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1710\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1710,"size_decoded":1975,"mime_type":"image/png","magic":"PNG image data, 238 x 124, 8-bit colormap, non-interlaced","md5":"1c76276e2677d2a28fa1918429baf678","sha1":"9000259086aabc656c1b4b8bdc17d25af8228145","sha256":"678b175d86b9bf73f3752d0bbc503ed30756d20ec0a33c0666dccfc4d836effc","sha512":"c1b4467cff194542890311e4a0beda3d7d1394c9049a320c29cee69be3c32f1935768da4ede92ba83683fe24ca98fc7b8fb64ae7dea29cb9b0fcbb71ef15f139","ssdeep":"","tlshash":"9631c6da7280d060f7ef9e13a129a31ac473817ce786d698c09d68ce8503d3283b620a","first_seen":"2026-10-07T18:16:16.076235Z","last_seen":"2026-10-07T18:21:16.211815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/honey-drop1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.506Z","timestamp":1791397232506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/honey-drop1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22214\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22214,"size_decoded":22480,"mime_type":"image/png","magic":"PNG image data, 230 x 457, 8-bit colormap, non-interlaced","md5":"aa559039854037fb4ceb073182c6a221","sha1":"4ef850aeddfec566226568e5b74666b1bb8b1c64","sha256":"ee68f7e238e21a6c2855facd5e3f4ff570f0c0076d1b33d3670c96f6e2d729a9","sha512":"1860dc542a0d31e7e2ae6e3c23cfd27f851457ad094b685ce9d3bb5abce47d78c44bdc94df208bf66f6ac64a564953624f1053c8daa48c004f72b80f7a239cdc","ssdeep":"384:guHZ3Yl4QMkrSw5w8Gt8wHuCahg4wul88xJ160fYgAUsYC5z9:guSl4QMkerOwHuC+b8WJVYqsYq","tlshash":"49a2e114a902dc40c648b5a0ab53abeb13d6c7770fb54f57d492b1424e8bb0bb412a9e","first_seen":"2026-10-07T18:16:16.163406Z","last_seen":"2026-10-07T18:21:16.220708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.792Z","timestamp":1791397233792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0255582e599007d621a42129d7d27f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1073125\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a46eeba73d2f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18387,"size_decoded":4688,"mime_type":"text/css","magic":"ASCII text, with very long lines (18387), with no line terminators","md5":"e0255582e599007d621a42129d7d27f5","sha1":"7558586a6dfc7f897c6115afd54699f13e657fdc","sha256":"d85c5684bc2ca8b6dfac3e8c95320e22afadf8adb1a923b11a52465c49a00b0e","sha512":"7213efe6431739a3539e9d9c386cf2b623ee42381078447ed1083324268f49aec93e5eebdb7a4c16717e79be0e6b06594a7a801435a054535f243a2143a4519a","ssdeep":"384:KBMbrYbv+esY2jFWlnrCxN82TNSixi7rXt:UUAXt","tlshash":"2d82da93b9e314dce657c632c0e1f67ca83f4a20c757c5a3a9437bb98681ad73641a4c","first_seen":"2026-09-14T08:43:43.711999Z","last_seen":"2026-10-07T20:49:00.176224Z","times_seen":1508,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.824Z","timestamp":1791397233824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"95fa576ff32490baa52652a17f62e04c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1073125\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a46eeba76d6032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39935,"size_decoded":9748,"mime_type":"text/css","magic":"ASCII text, with very long lines (39935), with no line terminators","md5":"95fa576ff32490baa52652a17f62e04c","sha1":"16359dfeaee9eac6142541fb857ef49c790f9196","sha256":"103867cb284cc821fa8e3a9fcb38f938eeea660e8efdef3950f5324428cebca7","sha512":"d3e19999896c457ab78b0c8df6b748b3fe7c2ffb0dd09dafa6569fe2f6d8a4d363c2a8747b6cbe143fd1b88fc73954998d86305682d3b85c9e719b7f56969057","ssdeep":"384:gwaRBMbrYbv+esY2jcWlnrCxN82TNSixi7riPftTQUifm7kUdwddCri43V64gpjJ:gwaKUAgMUifm7kUdwddCri43V+SffQ","tlshash":"920374a2b59720ccb197c33290d1fabc642b9670d753c6a6f5137bb98ac25d63612f0c","first_seen":"2026-09-14T08:43:43.753483Z","last_seen":"2026-10-07T20:49:00.149807Z","times_seen":1850,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.144Z","timestamp":1791397232144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Open+Sans:400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Oct 2026 18:20:32 GMT\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23980,"size_decoded":2517,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"814f551ae494b6c629d07e7e37f4500c","sha1":"f894ec418332abd4f7214336198945bc579b4c43","sha256":"e26068894e04e39bdadb9c0f63d0ebf8a109cae7a831acfc8fd138ea663cfa63","sha512":"bbda9dafcbe2b0c21254122a2bd3ba9789e4b89f28ec79278920a2c444ebc6ef9bf419e36c9dd8e36c15165bb71ebdc04c6fdf2dd081584ce1b78b89a2694c63","ssdeep":"192:aCKKf2Xdr+Jn8qGIwQjoz0JCMMV2Nnr+Dn8qGIwQpWzySC77u2mIr+Un8qGIwQy5:Jvyqh+hQqhVCVqhJLGqh2","tlshash":"0bb21b9000171850aa475de633ce7e34ee0f92617044d0ba6bfd8b9bdedad6963b431d","first_seen":"2026-10-07T04:19:22.641146Z","last_seen":"2026-10-07T18:32:04.474955Z","times_seen":5,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/grape.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.502Z","timestamp":1791397232502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/grape.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12733\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12733,"size_decoded":12999,"mime_type":"image/png","magic":"PNG image data, 153 x 130, 8-bit colormap, non-interlaced","md5":"4d6859672c7ab3aa6ade2ec7af531c99","sha1":"d0af5c1350e65169dee4d619a2059f3d53f612c3","sha256":"487dda386d6af15bc3c27e4053c6df3c08445767b012b185c32200c38b11a914","sha512":"6a0f60a66a70b97dd7db25acf4d75023b66077c403eeb98a8c2f2d6226ec724ab1a0392441e888667b8a33fb27e9b280fb677751bf0d1c287b005589299195d4","ssdeep":"192:QHMRukBA43ginUh3c1zxvYA23o35QgZBX9n66sT9KdFtmvDAElXqCbPaznIdYzEx:QHsuALwiesCA28F6J9gFtmvvxPa7G","tlshash":"3642bf3d7dee854c0641a93e170cb32c68b1da6bdaa60952341d985eef622865cbc841","first_seen":"2026-10-07T18:16:16.099287Z","last_seen":"2026-10-07T18:21:16.237187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/favicon.ico","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.732Z","timestamp":1791397232732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 18 Aug 2019 09:34:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":763,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b9e9cfccd15ebf492b4410f605037a10","sha1":"d866c1eb6918ac833f5ae69b8a3b6c9314968aa1","sha256":"fd0d560d08308290efaa44db399268fba4e8957d3927a6f189c665a9f5b8aa2c","sha512":"936fdc33e7e889830d3d2d11a536948e4a006147130954e9005f1950e28a55f1382fa0d713f353da397f2cdae30bd1980f7643e1624e9bbc7ed75c505241564a","ssdeep":"","tlshash":"f72199f0ba477e54fd324370d1d6bf02820ebc63900042cdb368bc5bb883458e923a89","first_seen":"2023-05-23T21:09:26Z","last_seen":"2026-10-07T18:21:16.238573Z","times_seen":204,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/bootstrap.min.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:31.899Z","timestamp":1791397231899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:19:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20941\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155758,"size_decoded":21429,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"a15c2ac3234aa8f6064ef9c1f7383c37","sha1":"6e10354828454898fda80f55f3decb347fd9ed21","sha256":"60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36","sha512":"b435cf71a9ae66c59677a3ac285c87ea702a87f32367fe5893cf13e68f9a31fca0a8d14f6a7d692f23c5027751ce63961ca4fe8d20f35a926ff24ae3eb1d4b30","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F","tlshash":"68e386a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T08:00:04Z","last_seen":"2026-10-07T20:19:57.425104Z","times_seen":46195,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.846Z","timestamp":1791397233846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 670919\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=5,i\r\ncf-ray: a46eeba78d7b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22356,"size_decoded":7328,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-10-07T20:39:39.396067Z","times_seen":41597,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bg-1-after.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.490Z","timestamp":1791397232490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bg-1-after.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4700\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4700,"size_decoded":4965,"mime_type":"image/png","magic":"PNG image data, 1349 x 110, 8-bit colormap, non-interlaced","md5":"65792db93a25ce56175b2a81554b821a","sha1":"90f30db4185d655b12e65034ed7c836ac7dcce94","sha256":"baac270b562eadd2bfc3cfe4cf30827ca5d30ff6498169ce87bade69b65625c3","sha512":"0c39e4f6b825c95f1b42fc7587732c49bdd2086c83255816257d118cc6c5656b965030417d67c8551c36b24e1a8c814169889dfacc50c7adf61ba2d96a584912","ssdeep":"96:2bk9j2UPkl2+VN+xvPKgalJzs/EEPqB0WtU2L6UQqviBX/PvLO50ireoytq:Qk9j2UPkl2+uPKjlJyzLX2O+cPvLO5hb","tlshash":"41a19d646582dc34d269017ca88e08807053407e13be1d2909ceb92fe7cef7c2d86bd5","first_seen":"2026-10-07T18:16:16.093274Z","last_seen":"2026-10-07T18:21:16.242871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.523Z","timestamp":1791397232523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181579\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-07T20:41:06.980105Z","times_seen":568310,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":44,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/arrow-left.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.694Z","timestamp":1791397232694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/arrow-left.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 914\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":914,"size_decoded":1178,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"28082bc630f0157ec6c7ae528be10fc6","sha1":"55f3817ce5e40ffec71e10d36ead48178a622a0e","sha256":"a5ed7f5c204a56da4804e85deed474223470c1baeefd02132b9d6601dbc82aa3","sha512":"59f052d44e5989e3da84a18e55e18f05e7178e20cafaadb7bf4268911a39ee0806c5f8b065c7bb9aef165ab47217503148da30a529bcf37aa5bee650d2d263a3","ssdeep":"","tlshash":"7e1141da2f920f29f6ee68b3c4bac262415244e793b1d05212d2c93bbb2106ad115a48","first_seen":"2026-10-07T18:16:16.164496Z","last_seen":"2026-10-07T18:21:16.245508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.829Z","timestamp":1791397232829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0932bfcbc6f24c14db6ecf6a40c237b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba12831b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325187,"size_decoded":121335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42299)","md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-10-07T20:48:59.978648Z","times_seen":1667,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.650Z","timestamp":1791397233650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"792fff828f71afcb92d017b5421e20e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba6492cb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13016,"size_decoded":5413,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11094)","md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-10-07T20:49:00.072641Z","times_seen":1442,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.656Z","timestamp":1791397233656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ec0736224b16cd4c3c1504f06b8b79fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 308\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: a46eeba6593cb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11206,"size_decoded":5032,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6129)","md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-10-07T20:49:00.039398Z","times_seen":1422,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/style-ready.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.149Z","timestamp":1791397232149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/style-ready.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:20:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1470\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10629,"size_decoded":1779,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"d985aaa91340291637e212cdee502cd6","sha1":"8288c51d38f93ba43fdba930e24f3cbc603af2d7","sha256":"543b1c39090eabed771bb95efc12fea2d5b2fb7e5b8d284c29bad8e4425701ea","sha512":"03e63a9a26ea00fbe06645b115f50bb99e9035ac9df1c1337a8734b5d60fbf5ac5332130931b3942ebe450ff640275dca55407b4ff5c3ea2d8471cbb59cde3fa","ssdeep":"192:8tNzdjE0yc20S8+E6y+u/aquuaC2A3/7Q:+xo0yc20S8+E6y+u/aquuaC2A3jQ","tlshash":"4922045bff131c48a00aa9e3d4a627f4fe541443d1226deb84617e25fe8f5ed0272a1d","first_seen":"2026-10-07T18:16:16.08016Z","last_seen":"2026-10-07T18:21:16.25773Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/owl.carousel.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.163Z","timestamp":1791397232163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Sep 2019 01:33:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11139\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":11377,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-07T20:45:00.868944Z","times_seen":71545,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-6.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.211Z","timestamp":1791397232211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-6.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18305\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18305,"size_decoded":18571,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"0e66d8eb8189fb2a08b4a8bbdee5ed15","sha1":"dc4c3c83bce2b954bfb1745077694b3e47a354e9","sha256":"f2ce65b413ec0b798e35ffc341fbb9583afe13d74b21052aaf996a80196ad936","sha512":"9865694388a308be61e29c6e0262637bafe10417c4dc060825eaa5a4b52bb72c67fe1ad7c9a3b31f415627a017cf5d2600a44e3267a71d18849a39dc617cf3f4","ssdeep":"96:QkEWRvxNXBB7hCcX1VC0h5CH7xwvYUl/oCQY3kP4pMML/n4hHsA:QktpjNtC0h5Cbxwv/l/ofPXMj2HsA","tlshash":"d582f774ecf2b992e44cd43a0ad8650d9c234b93c9c39d45b7ce5a266f017ed9c4f286","first_seen":"2026-10-07T18:16:16.101841Z","last_seen":"2026-10-07T18:21:16.260525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/honey-drop2.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.509Z","timestamp":1791397232509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/honey-drop2.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10607\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10607,"size_decoded":10873,"mime_type":"image/png","magic":"PNG image data, 331 x 88, 8-bit colormap, non-interlaced","md5":"26f488d8c5a1f70cfd005f315812d210","sha1":"a7ed0166d2c4f8e06e5c72b2dfe9a1f3c77f3745","sha256":"97ced922875ac8f75812b8b18e148b27554437d817cd401268bd3b9b0bf11fd4","sha512":"836ea10bc97dfaa94805c249e6968ae3ba9d093dd5be09b2557a9b49ddcf8920d77ac8c8085e3b2ea3b732cd9a9a10047a5391df97a6cb24a67256a0c50cd308","ssdeep":"192:tYmefUyXeNvlxRf37ieBbCXbEf1sMGt/ownjpgsyhM1Ie9h:BeflWlxRf37J4Ef1itQwjisyWWe/","tlshash":"f222c067cff6d2ceb2c439bd5bf11824cca1d0537c69a9194083b7d82868eb499c3d99","first_seen":"2026-10-07T18:16:16.081361Z","last_seen":"2026-10-07T18:21:16.263069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.965Z","timestamp":1791397232965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://turbo-arcane.com/\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fb40f488d34d8e500cd5193b6cbf1df5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a46eeba20872b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10475,"size_decoded":4378,"mime_type":"application/json","magic":"JSON text data","md5":"fb40f488d34d8e500cd5193b6cbf1df5","sha1":"37afd6b5aafd32a9f0b98843b182aba8cf5ce608","sha256":"e2076eca9c47fe568e55ee6b0f1d9d11ce186576fabecdb8c27fc645b33e8fae","sha512":"22fe865ed894dea88eb72850a15dbfc321356ba6c67e2cdf325170dc19d03c1f0c427e3af6a9e6bd63bc27a024d706dd1ee6c00c02727a27df9140a77b7af2e5","ssdeep":"192:vmdjWl179zTRVUEAHq9iH+TidAg8G+9pPkKVKOetm6ksTAdYPizj1L:ak179zOHq9iH+TK58G+9pGtHLPizp","tlshash":"f422a557cb105adb02c257863e8fb5c2b63841de179425fbec4834bc03cddaa6217b86","first_seen":"2026-09-24T04:33:32.521723Z","last_seen":"2026-10-07T20:49:00.003295Z","times_seen":1707,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/js/bootstrap.min.js","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.160Z","timestamp":1791397232160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Sep 2019 01:32:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14764\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58072,"size_decoded":15002,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-10-07T19:54:37.285041Z","times_seen":29235,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/fontawesome-all.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:31.906Z","timestamp":1791397231906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/fontawesome-all.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8976\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51567,"size_decoded":9285,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"91b0bff125b9967a85c9627d3090774a","sha1":"72fd72adbfc711857a70dce578ebdc19b3087641","sha256":"6a0faffb6bb25be1d031597813b3f5b1d69807b95662dd619a3f4f65dc7ca3a9","sha512":"f8820e281e7cc305f89fe6bf543e11af806e33196129daff5cf2c21e922744165fa84a417622dfd753eff23612868f9dd13fcfe6fc62f675c259e93acc76b4dc","ssdeep":"768:FUii4ukQxT9fM4h65sTODNn/gCJ0+0UyqC/:yii4wTdM4hIsaDNn/vD0U/S","tlshash":"8b330feed1bf01904311e0812743e3e0b739b66cec8a5c98d2a67d8df6d165ca186bdd","first_seen":"2026-10-07T18:16:16.083694Z","last_seen":"2026-10-07T18:21:16.265755Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bg-1.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.488Z","timestamp":1791397232488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bg-1.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65980\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65980,"size_decoded":66247,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1349x670, components 3","md5":"b9ec36a1a221b187574fa168db3c79fc","sha1":"8ae759f28b4697236d25b2953b1b63d44023fd56","sha256":"12c257fb16a21be636f792f67b11331c9a338f3bc626eab8c428f4dddf6eec98","sha512":"aa4c37da34dd932bec744e7a03316215fda6e5ae40034a1f4b80e473feed1a4368695cf7660c1b5114bbe2b9f9cab10591857db065087090e901c94892f3dd3b","ssdeep":"1536:atbV5eU3YfsFmOz/UEF+oTOCddUXSHD+XJ5uPVspqxFVup2fRB:ab33YfCmOz/9FBuXSj+Z5WVpFVueRB","tlshash":"99530244bbcc7b31f626983f39968f8da54ed19203e8a78bf5db62938730b701d16421","first_seen":"2026-10-07T18:16:16.069206Z","last_seen":"2026-10-07T18:21:16.271272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bg-2.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.497Z","timestamp":1791397232497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bg-2.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10654\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10654,"size_decoded":10921,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1349x1000, components 3","md5":"a6a97f3b55e159150c3de91835251c6b","sha1":"6f93da2274e45316f1b5a3070e0a64e31332d57c","sha256":"88c0a1360f222dc9fb7362d4684942fe26151fa903070d6ff60ac23cc0c9e446","sha512":"2d7cd8ca3e8b6cb83c6be6637d4699ba4fa15033dbd70ab3e48b680015ed444965ba18aae3d442015f9a55acb7bcdc37640a8d5f884d37739f5913f701f10657","ssdeep":"48:ymlMfYTje35iO5EOotDfKExsmr+CSiymbt+roFNFi2GvaeX5dy15p:7Vve3QO5n2gBytVLFi2GCepsd","tlshash":"9a22287b3f135127f8d52534817f8300e70bf92b6a1a27dba5060671a8732963b6bc5c","first_seen":"2026-10-07T18:16:16.061083Z","last_seen":"2026-10-07T18:21:16.27222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/cloud.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.510Z","timestamp":1791397232510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/cloud.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2747\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2747,"size_decoded":3012,"mime_type":"image/png","magic":"PNG image data, 1349 x 111, 8-bit colormap, non-interlaced","md5":"4f6cf4cac1e95b00d56552510917ab6b","sha1":"813dbd73ba5c5db46f13525177965999509b58bd","sha256":"cbbca50f34e15d66a4af8dada4b302348c6aef8b488448b8e57814df1f37c289","sha512":"89e56b5e5566ecbce450af4ded7544ffcfcb6fe84da79000107cb33dde49390884b6d928f920f8ba76154b2c6c9e82838cd41ff9559137b207c807801d461a3f","ssdeep":"","tlshash":"975139ba9484ae98381cb3244102d36b19d81e15c9d0063b38226ab53d2cf38361aefd","first_seen":"2026-10-07T18:16:16.135062Z","last_seen":"2026-10-07T18:21:16.273134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bg-1.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.567Z","timestamp":1791397232567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bg-1.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12556\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12556,"size_decoded":12822,"mime_type":"image/png","magic":"PNG image data, 1349 x 172, 8-bit colormap, non-interlaced","md5":"9df1d113342895190f59f316b90ec51b","sha1":"5519f81107c3a5d04171c40119b6dcad83c16a6e","sha256":"158d51817fa40dbd3caa575df6ed92cea58eb9308901c5f264aa8348bc494729","sha512":"8226f0f3db61d357b8cd9610330b1a0559f42bc7fe6b84313b651f9cae1835361f2a2031e3b98003c71af1b84264b29c99ad5c24e359e48f965d635f43458ad8","ssdeep":"384:rUZ37Ruaub6YXng6fQJc9yVKoTcp1Zp3k:rUZLRu8YXg69yFTczk","tlshash":"7742b06f13377445a702b4364acc7437f1b9eb2870b71a28ffb4765c545847b5a1a288","first_seen":"2026-10-07T18:16:16.122161Z","last_seen":"2026-10-07T18:21:16.274226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-2.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.190Z","timestamp":1791397232190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-2.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 752\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":752,"size_decoded":1016,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"84c069b5d388a0fdb97ebab1405f75cd","sha1":"d7eeb2a626540f30dc701cdf0a67073e1c0cccac","sha256":"b3994867a3fd8f5957ee39e563be83c8abecabd4b977786008ec2dbfd982dd19","sha512":"909f1437080c926a2b722c611fb17022af352c676b4dfb9e7e90ea658f340a6a3ce5533d961fde1efdc62ae3b5a25e4a11485952ac589818bc55e472766795af","ssdeep":"","tlshash":"d00147c97907f84de681e92b47496002e7726d586703c143e47530750639e506591e08","first_seen":"2026-10-07T18:16:16.094405Z","last_seen":"2026-10-07T18:21:16.275329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-3.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.191Z","timestamp":1791397232191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-3.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 863\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":863,"size_decoded":1127,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"cc1497084dd7b2a71f3b0353b3616e60","sha1":"db980f269f7440066afc4607f76937b199172097","sha256":"26b7a7869a3fd74117c8420f4b39c0e15bdd1b6a81b3c9495aca07422254d4b7","sha512":"f74e5054b24bf5002011b58cb4524352c0f326a5079d354169375e6c819f1e79bf2333d337ee20b3b9f131ef1b2d3e58db7770ab40fd45b3a9207beae0dade5a","ssdeep":"","tlshash":"f01144ffaa192c46c2245757ca7644d796940c9a4498d5e3dd2771cf8cb053020d8697","first_seen":"2026-10-07T18:16:16.089023Z","last_seen":"2026-10-07T18:21:16.276171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-3.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.201Z","timestamp":1791397232201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-3.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7093\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7093,"size_decoded":7359,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 146x146, components 3","md5":"04ed0f2c480c6ce5a9f8ccd9e7efd266","sha1":"2bc7aac90d11c875478eb1b30e668af3121dab95","sha256":"7cbaeb984db51602afdcecb79e38daf2868992112a98a01ded938ff82a98b070","sha512":"7c8c37df1c79d7d058d13489a2526343208c2f11a2db0f12f664f8a1f130b426330b9186122a0e85be95f6595168a12b92fee83b5ecc1c8f4b919fced6e6f41c","ssdeep":"192:OfwPCA+RCTdpRKEB7Zp1Yzr/63jBMWrsvehs5XAeZJ5u:O2z+RCReEFOzr/63dMWrieh3eu","tlshash":"42e19e2ce72237d5fd2d15f1ff4a5eb678d5cea2106434afb9d0661290c5611240f23b","first_seen":"2026-10-07T18:16:16.06628Z","last_seen":"2026-10-07T18:21:16.276925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-4.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.209Z","timestamp":1791397232209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-4.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21654\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21654,"size_decoded":21920,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"ef92b445355f524372e50d347caa978f","sha1":"311b850f240dd34693ba2ece5d2ff93c0a1351d8","sha256":"bba983abf39e9cff9e5f6bb394c84004a49f5b7c5c24f2f36cda8115cf888e7b","sha512":"d9171d9f1b44b81f5553249ba0fec2db2d15f429cf4aee47894d0453fdc80efd1f546351f1f99527374a52dc60c7f6bed10f9bc774d152ec28634ad6f564c784","ssdeep":"192:QktXfVBdMhWyGDgVZLBtu72jVyAOtIcdgaNPKAevrXD5kQ4:LtXfVBTyGDgP3tZOtIcdgasGQ4","tlshash":"e2a25b20eef171616406a3726e9829cdad334a97eb42fc453ace1e1b1f19b884d0f4d2","first_seen":"2026-10-07T18:16:16.149288Z","last_seen":"2026-10-07T18:21:16.277533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/bee-2.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.508Z","timestamp":1791397232508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/bee-2.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 703\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":703,"size_decoded":967,"mime_type":"image/png","magic":"PNG image data, 35 x 31, 8-bit colormap, non-interlaced","md5":"f549ee2b49bc521281ee3c7bbb2820ed","sha1":"09a02d071a6c108a44a7efecffaf92c092e37336","sha256":"5c4c8b9fac3e0887f0c0bd2f20970fdbe89cade771298891664863fd2ffc53d6","sha512":"57895569b75f9722d97b9e4be590b2188067eb64858873b2e42092b1491d26bfd9bbb3b8a9b691ea17bd323e02f2c43b867291d03501b0124be6d2889199d66a","ssdeep":"","tlshash":"e80126a57706d9a0594b443f9b6d8729d82ffc775f195317542015efc92d0788cc12f2","first_seen":"2026-10-07T18:16:16.070464Z","last_seen":"2026-10-07T18:21:16.280423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.515Z","timestamp":1791397232515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181579\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-07T20:41:06.980105Z","times_seen":568310,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":4,"connect":33,"send":0,"wait":20,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.519Z","timestamp":1791397232519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181579\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-07T20:41:06.980105Z","times_seen":568310,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":25,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.520Z","timestamp":1791397232520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181579\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-07T20:41:06.980105Z","times_seen":568310,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/responsive.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.152Z","timestamp":1791397232152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Sep 2019 05:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1521\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6763,"size_decoded":1830,"mime_type":"text/css","magic":"ASCII text","md5":"ca045dcda94098e79ff4ca8e210cb08d","sha1":"0c02947d70d1337050189db7ff4066f15bf154d3","sha256":"3f68c167902bf1de5a2a3bd13e5eede2060d975bf7f1f08038d9cbf35842ed14","sha512":"c031043a103030aa68535f07d046625e93651e8efee5429e2ca26a78f1329e4aea3b58e10a85fb94bca54d2bc845d32d0850360f7668e4e6d782442f534615ec","ssdeep":"96:8Bjx0MKXlZhZBn2tJIUecGkV+UT202h5SZEXxXTBncCStRTytg6hMeqxh:8hMJnmW55TTZcCGBeSh","tlshash":"17d1e0567e943e88a54ab1ee9e94f7e0971d4002ff4f1ccba19231ace6cd74401a2f8c","first_seen":"2026-10-07T18:16:16.084802Z","last_seen":"2026-10-07T18:21:16.280957Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/icon-4.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.192Z","timestamp":1791397232192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/icon-4.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 781\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":781,"size_decoded":1045,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"2975984a173318b05dda11b057a6a051","sha1":"13e5c64bf3a810ee206f60ea8c0caed4140b7619","sha256":"34d3e4c216c526c23f7b84a3e4416171ac9294eb2b79b7ecdda96660c7132af4","sha512":"04ed36af3c1eb41ee6e2dc2494e8ea411f30b49c65b99e3b983dde717685a97e99e03a080fe6a8729cd43b7d53568f4f0edb860ea5228fe7bdd98c15fe02b085","ssdeep":"","tlshash":"790162fa17aa8c238f264c27e2538ad448f42daa0461e53975dfb5fc49b7055d2a022d","first_seen":"2026-10-07T18:16:16.095621Z","last_seen":"2026-10-07T18:21:16.282437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/coin-1.jpg","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.198Z","timestamp":1791397232198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/coin-1.jpg HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4154\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4154,"size_decoded":4420,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 146x146, components 3","md5":"5c02074708ed3cd7abdd650f98eae27f","sha1":"f219a8471fccdd7cafa8a294cc690e3e625e1989","sha256":"0389cef6d3d9fba02580e4591fe3f07ed71c72d4a012f52cc425c940c305b103","sha512":"d117c88f6ae205da3b7980bc742d773ea9eda8947cd56ece0c85d7e5f84465ba6b34249e0ddae4551dc57cdbcade98172635e4ec530e5ea3bc0cc1757945bd8b","ssdeep":"96:ecdzSVey606GJvpnZCGb3MDVrpYEywLd2mSvR7l6M:e0SMy601vWXYz1vz6M","tlshash":"78816c93ad93871ee424bd33647d8659385e0d45b00b6f97f46fb470a3b88e1814b509","first_seen":"2026-10-07T18:16:16.155398Z","last_seen":"2026-10-07T18:21:16.285994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.517Z","timestamp":1791397232517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:54:13 GMT\r\nexpires: Tue, 05 Oct 2027 15:54:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181579\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-07T20:41:06.980105Z","times_seen":568310,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/footer-bg-before.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.568Z","timestamp":1791397232568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/footer-bg-before.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/css/style.css\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12109\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12109,"size_decoded":12375,"mime_type":"image/png","magic":"GIF image data, version 89a, 1349 x 172","md5":"6d0bcd4d5e0747ca09a3f64b7c18bdc4","sha1":"087c2f58010b3749bc52c39f9e06ab565ce7addf","sha256":"400b2ba300b662e9c6d9fc5da49bda12d45923924e4f5beab94bfa31bc8e63fd","sha512":"28fc9ca304fdc63d0a8c67dd72369ef06e883f9159cc8443f36b30bb7e8bc046e107839946ffabcc0c7338acafd0fec79dba2da2b522720ff7c2c15efe5e9a27","ssdeep":"192:nVmflFkBPRtICEFCeWraTxUoObTbGhulyrU8fDrSiX/UgSAYFtIqnXwXgue:nVAlOBPROCeMaTxcb+hu4rTbeiX/UgpO","tlshash":"8642bf80e057248528d68cda7ffb3dbf0c7506c2fceab79b8a81ca81b11897594110f6","first_seen":"2026-10-07T18:16:16.160464Z","last_seen":"2026-10-07T18:21:16.286764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/css/bootstrap-select.css","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:31.903Z","timestamp":1791397231903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /css/bootstrap-select.css HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Sep 2019 01:19:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1888\r\ndate: Wed, 07 Oct 2026 18:20:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8831,"size_decoded":2197,"mime_type":"text/css","magic":"ASCII text","md5":"6547ffba56fd825673962b76090784c6","sha1":"acc1132345695463d2b4c477d443df3065042c01","sha256":"b186cbd293a40543718fba46a8ef67b81912fdd44e401e7d6cf6516d2297aff4","sha512":"4c67a84d2a4a0ba56fa1dadc1eec67ba1211b218872f0b60628340edf54ebd1333faa4ed5d7bedd85614ce592ef9a0ce490d98e1cf04b7323a72713d061502c5","ssdeep":"192:3VUEGsVt8jKV2krF7l4pvCSDJcvUzuDcL5:SarF7l4pv5DJcY","tlshash":"500242ad77e20170a19980fa79856ea6378da002724fcc7877dfb18c5fc118b5a33b56","first_seen":"2026-10-07T18:16:16.159425Z","last_seen":"2026-10-07T18:21:16.287447Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"turbo-arcane.com/images/payments-3.png","fqdn":"turbo-arcane.com","domain":"turbo-arcane.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.208Z","timestamp":1791397232208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turbo-arcane.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 13:51:26 GMT","end":"Tue, 22 Dec 2026 13:51:25 GMT"},"fingerprint":{"sha1":"0C:BD:82:4B:84:C7:05:EB:BF:75:C6:D3:53:AE:AE:6C:0C:F6:22:73","sha256":"7A:2B:C8:01:1B:0A:A3:90:27:59:FA:64:D7:41:8D:0E:AF:41:78:8D:76:CE:10:E3:76:E9:2B:26:3F:13:A6:18"}}},"request":{"raw":"GET /images/payments-3.png HTTP/1.1\r\nHost: turbo-arcane.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://turbo-arcane.com/\r\nCookie: PHPSESSID=kqpgem1mtr19lucr2hjivf9v62\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"kqpgem1mtr19lucr2hjivf9v62"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 18:20:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 14:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19796\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19796,"size_decoded":20062,"mime_type":"image/png","magic":"PNG image data, 139 x 30, 8-bit/color RGBA, non-interlaced","md5":"858841aead34f7b0fcb758cfaac2e8e1","sha1":"68992d87d7612922df7f3a8c3580ca143bf8744d","sha256":"5b131f94accf4ac9e85654c317e0e4a951f0fa43440d1f7be9dda4072f16c4c7","sha512":"a1385c3566137a2c506191e6513a059ae261fcd318410be378a49a39cb193c24f3d702fdc191290a6190b0e6cca2ad457265c79d781efedc44fdc1fbecd48e29","ssdeep":"96:wkEWRA9xNXRuIAdfCcX13pQM6U9G5vQZ7XMJQ5WgioiJIsKaBRTrVX5Z:wktAnyIADpQM6oGxKMciG/WTRX5Z","tlshash":"29923c28fdf2b263d58ad1362ec214095c735747ca818c84b3ce982a5f1479dcd5f9d6","first_seen":"2026-10-07T18:16:16.156613Z","last_seen":"2026-10-07T18:21:16.287996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"turbo-arcane.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a689b2c18a12b1d3ecebd75\u0026widgetId=1juk9sael\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:32.959Z","timestamp":1791397232959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a689b2c18a12b1d3ecebd75\u0026widgetId=1juk9sael\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://turbo-arcane.com/\r\nOrigin: https://turbo-arcane.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-vddt\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-3-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Oct 2026 18:20:32 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 307\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a46eeba20870b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3203,"size_decoded":1971,"mime_type":"application/json","magic":"JSON text data","md5":"bc8af8e813910202d6f15b27de682992","sha1":"abbf18da7ea77093d1e3f821199b68709f770205","sha256":"4e76d82eecccd727b611f542212a16cda240818e8339fb0b2b7da6a641155345","sha512":"df8d8f9ff5de016fe96a01249744bc9ff5c10ee818f856960bb864b822c8144a6848e891f9e2af23e4ae89f3223b0b5f1b53a14e30413cd19c71d5ac11875784","ssdeep":"","tlshash":"f86133298806dd3963c9c24774de3627a93dd123e384591de0986d3d83efacd321274b","first_seen":"2026-10-07T18:16:16.123679Z","last_seen":"2026-10-07T18:21:16.288881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":4,"connect":2,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://turbo-arcane.com/","date":"2026-10-07T18:20:33.784Z","timestamp":1791397233784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 18:20:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fca40181c727cc29b69045ec5589f638\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1073125\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncf-ray: a46eeba72d2832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23816,"size_decoded":6020,"mime_type":"text/css","magic":"ASCII text, with very long lines (23816), with no line terminators","md5":"fca40181c727cc29b69045ec5589f638","sha1":"83aaec5320016a15845195eb1d3fbb8982b66fa3","sha256":"a8c70c82d9bd2a2ef3e4edbe3cdb060bdcca80a3351307d066eee3df4be8a8d0","sha512":"32f6a558154dede9ec9cad1177d1142b7c949d431d8a3e9ed7cfc31ac62bb8ffe2cc501c18a86a26523bba0b0d61f6ea1238e8fec3ab5cf531531a5b6990140e","ssdeep":"384:gZBMbrYbv+esY2jcWlnrCxN82TNSixi7rOPJh3L:giUAEh3L","tlshash":"a2b21da3b5d714dce657c236c0d5f67ca82b4a60c753c6a3b9037bb886c1ad73641a4c","first_seen":"2026-09-14T08:43:43.747289Z","last_seen":"2026-10-07T20:49:00.014659Z","times_seen":1882,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}