{"report_id":"ee80d2f9-6936-4010-bc74-26a8274c5a3b","version":6,"status":"done","tags":[],"date":"2026-02-22T22:59:25Z","url":{"schema":"http","addr":"capstockersprimex.online","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"capstockersprimex.online/","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"title":"centralfeud","dom":{"size":18404,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"52caadf7642e61346dacf5d5f94424f1","sha1":"52f0358a310d5dffcacf4439bb28d460a31b9ff9","sha256":"ffabc95b3b2ac03e8408cd8afec033094f4b713a3350ec6fb461962d6e88c86e","sha512":"24a328a0377a1622a9fc88d7cffdca7c24b63d96157ceef3a799cf1fd11f9612537e8f38c32b7a9b4400333ab7fbb80758b279f59bed03647276b243ce7a33d4","ssdeep":"192:Nl00mVwtD6uuGFkvFHHgIYRx65SKOFOZIfH8fPgIbyYRncYPij8J4jtm1TWNxKqW:NlAVwNpFSwFjgz6mBWzK/hZS5o","tlshash":"0382730a28e3000565178578abeb17297bb5c007db0ecc34779e12ad8fd1ed85767b8e","dom_hash":"domhash87f64a94e4e6d7d14b5fe834ed978041","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"capstockersprimex.online","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T22:59:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"capstockersprimex.online","ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":42,"received_data":2174190,"sent_data":20239,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"centralfeud.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-27T04:19:24.288673Z","last_seen":"2026-01-27T04:19:24.288673Z","alert_count":0,"request_count":17,"received_data":0,"sent_data":7896,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-22T22:27:51.54973Z","alert_count":0,"request_count":2,"received_data":79962,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"capstockersprimex.online/","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"970bf14a3776b122b6b398008044c133","sha1":"f6f17b4bacaa59658177d885ef9df7417cf9645a","sha256":"c797c1ab05e1a42eabb9d607471d28cea1ad104aea4da898ee090a2d3b97ec77","sha512":"2aad537d4446ce9a6e847d1581ead5b81cc3f327fd08d62aa3d279f629c5e575215477fd1d1a7dbc96abf646ac8863faec660cc187b2ea074f8d8f52d5154c36","ssdeep":"","tlshash":"d431ab4838126034e97f763eb7abe35832748127208e98543b0e83991f719a657d0fef","size":1636,"data":"","first_seen":"2025-08-06T14:52:03.97126Z","last_seen":"2026-04-10T15:34:56.215244Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5692ea408f284bfa997deb4fbc7a3065","sha1":"0bd427c56df6d416218528dcb68cb512ac30fae2","sha256":"f229d9a12a45467835835e5b177bedf5821e1a6c94bc6a834add3774578c4328","sha512":"433e5d9cce82b449f3a5a4ddb4d3c53bb8bc19f57d079a1e6f4bb964749cca45e6a5c7b91171d2b9eb56d6c8a52bcb829c6a23fe9e915003257b243e66a89f30","ssdeep":"","tlshash":"a1c0802b3155774501065105f31504dc3f1404ae51304532356c2d1c47e6156a3d75c5","size":166,"data":"","first_seen":"2025-08-06T14:52:03.972738Z","last_seen":"2026-04-10T15:34:56.215734Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/img/in-slideshow-image-4.png","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/img/in-slideshow-image-4.png HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105814\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 862 x 540, 8-bit colormap, non-interlaced","md5":"fa46010ffcb9ad8452600291048b6523","sha1":"4f7710f89a69cdd6048677b41c8037e925001c98","sha256":"c32d393c587663a26d08b96285317b8750038639cb15c885f1d778469f1bd99a","sha512":"0a376b34ad2a10e4bf153dd00e83b870929fd75112e47372ec9462bd1f64941a11d838a6ad03a9b0505f482ec5fa1e254485f7ce487d38969b6d8f59ed54b316","ssdeep":"1536:+p6BYHED/MnaT6jyhil9qnY+lLf8hDqhO+r7rv0O1wQavpZPkIKL+r30tz4b:+9lnaWV7qnb8xqhXrv0kwzHPWLSEza","tlshash":"d5a31221a3cef79b6f43d1fa79c1c104f667ae746f6b68168a5e81442c9ed107e0ca09","first_seen":"2023-05-27T13:25:39Z","last_seen":"2026-04-27T06:14:51.22127Z","times_seen":286,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/wp-admin/uploads/testimony_9381b5c720fe40fba64075dc5510f734.jpg","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/wp-admin/uploads/testimony_9381b5c720fe40fba64075dc5510f734.jpg HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94771\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 720x724, components 3","md5":"8f8f4420d78ba5a991d7b2c57c20750c","sha1":"372507504f002eb5621732a659d41c3d97bde749","sha256":"3509c8194e803ab42d6c173a5408ce77aebec8488845d07e48c9ae9607ca2fbd","sha512":"198433950761ae902a9c32a869cbecd8f8e19c2e726f558ea566985ac7ca6b7dba1d62c6bf129a612edcbc9d22afea15fd8787566b34990c8e591b9ed72fbebf","ssdeep":"1536:ZjOPwG75THj5YvejRze3s42jt/yTB2syJFT9BZkyeGq6zYyFpolYBZu66:dOtNLj5YvDEaTLyJ1qya6kyKa6","tlshash":"059301ab4ca4afcb0163e3d5fe5a51056bcbae5235c0bcd9a8568d8cc326d011847f9a","first_seen":"2025-06-27T06:33:50.109958Z","last_seen":"2026-04-25T05:28:13.374391Z","times_seen":102,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/fonts/lato-v16-latin-700.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/fonts/lato-v16-latin-700.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/bitopt/new/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:04 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22992\r\ndate: Sun, 22 Feb 2026 22:59:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22992, version 1.0","md5":"1efbd38aa76ddae2580fedf378276333","sha1":"8a49976f2470ba2a1db6144245355d3b889312e4","sha256":"8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20","sha512":"dd16efd323a38dad99a105e7443546e112ff42158018c885091df498c8c5b88c4d83737b4887332ea54ef3a83483e660c783073c4ce61fca4098d24aac05ed6c","ssdeep":"384:i8dkfSOTyQBgarmZBcC60rEJq/VcteWhh/nqgYA7L3ittJ2MY+0K7YXr5eC:xfHQBgGmZBtnytL/tYSLStDJY+0K0bD","tlshash":"5ba2d0ae5a223af4d77235a4d1bc351db3ddf0c22193e90e73e77138cc7a6451182069","first_seen":"2023-04-07T01:34:48Z","last_seen":"2026-05-03T13:00:40.088503Z","times_seen":2139,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/wp-admin/uploads/testimony_29be3e8e619aa7989c3f78415b4b215f.jpg","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/wp-admin/uploads/testimony_29be3e8e619aa7989c3f78415b4b215f.jpg HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53025\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x720, components 3","md5":"d776f2a3c39e2d319fb6d3564a9704c0","sha1":"4a7ce08f8c79d2ef59e83aba827c5fc9f6cad949","sha256":"5a0d9826864ad3cfd7ac5e8e30b7f64912d83813e0421a3c8dba51e420262a1b","sha512":"d010e467eb96301ff017052ac4a6b3636466867458173bb9f9eaf0681051d9ab39c90bee6cc4143b7053311ba85ef9d50a8b500d7531555d1faeec69719c4126","ssdeep":"768:y1vhEwE0kRq67MEtwjS7cMqI2Mlz9sN8+1ZJlfz8CYMaxgGRB4srRs6xKG/b7m:y1vU9GOQSz2Yz9sNnZgvV2K7RXm","tlshash":"b53301745ccd4c98ed9678fd20ea1366468c486a7ee088baf1c6bd0537ee2e41084ff5","first_seen":"2025-06-27T06:33:50.136284Z","last_seen":"2026-04-25T05:28:13.354372Z","times_seen":98,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/owl.init.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.094Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/owl.init.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/fonts/lato-v16-latin-regular.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/fonts/lato-v16-latin-regular.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/bitopt/new/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:04 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23484\r\ndate: Sun, 22 Feb 2026 22:59:04 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23484,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23484, version 1.0","md5":"b4d2c4c39853ee244272c04999b230ba","sha1":"c82e22dde9716c40ba20e6c7ed03a1b66556de15","sha256":"c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1","sha512":"d315d6a4e28bb125128d3a4d99fe120e383061d367341f06c4b74a589b4ca29c516cbc8d23ddd37267a1e4497c74fd58b1dffd39cb70348b8a3ea3d48237f8ef","ssdeep":"384:iXFbv7T+soFz7IbR/aBa639y2FNedPuzHQ1eGcYe3mkGtapwx/vX5htghzvcjvm:iXFzP+soFP8RQty2FNedmzocYe3DqapT","tlshash":"40b2e1778269aa70d6d01bb5ffc112a73a79589245d5e3a34e409b02442c73f7eadf40","first_seen":"2023-04-07T01:34:48Z","last_seen":"2026-05-03T13:01:27.247411Z","times_seen":3294,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Sep 2021 19:10:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12416\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60145,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59959)","md5":"fc667d26060163d6f9aa640774d43ede","sha1":"e601e18ef2199b9042f94e8d86ff309a4fd17234","sha256":"83dec4e0b90741c8cb02d108aa76390f1f35dbd33733dd56db719f2af3c7b40a","sha512":"c7d11ab828dde35eee1f789f09a4b71ed6c5d6689702640269951515a545b89e731dbf0e87de2b9a3b3ae76e6f5c34e84210233a5acd2d7d7de5876e55a653a0","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzdo7RZ2qpvvV+NTji:PE0PxXE4YXJgndFTfy9lQo","tlshash":"a4430bb8e54c01dab731c44bbf82b2bc61b6f73ce5914d95f00e591c2ad26a811c5fba","first_seen":"2026-01-27T04:19:29.827714Z","last_seen":"2026-02-22T23:07:13.449899Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/logo/logo.png","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /logo/logo.png HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 04 Jul 2025 10:22:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5601\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"18272700b193687a09137e410e523236","sha1":"4e7cc1dc3f16657dd2450ceaa52b93b1a7cce1a2","sha256":"3a41c44de8e008deb9e827d13ec2fee5d1c5e3b2f9af13bb5908614be2143a93","sha512":"7cab5ef07d8b3616f1652b8883f2db3ae2eb6d71c824dfaf6493991575a2802d6669ab8bf58e416e871bb7d60cfcb94b90d70e114951ede42a81daf397a83bae","ssdeep":"96:sFAIOHchgtg3vKSFVilJO2m5zJSjO9vh50zmey0aAUsUPeDI+zJk9nnRrF:7HuR3vRVgO2mHbX55XNPRZ","tlshash":"b5c18dc5fe0f79879ffa16a657b391a6b818836c1216332d01734cf997368c1d828b8d","first_seen":"2026-01-27T04:19:29.808815Z","last_seen":"2026-02-22T23:07:13.430318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/js/vendors/uikit.min.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/js/vendors/uikit.min.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40683\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132804,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"7c6c0030d4b14e7d0c8a2015b7843e6f","sha1":"f56bb163d43fadb610c06d878281fa5a9315ce8c","sha256":"2e20d5699ee7575d3ba7f020ce63869e10b7cfe9b5f563b6c8df0b2372404391","sha512":"24ddfa9d2ea57953a0a469a5d83a5c55b86f204844951034428cb739ab6a9dcbd2a2c3d149992af664c41a86dfeca78b52f374b5a3c84b9ee23f38273f8da408","ssdeep":"1536:3COqwCrlHkY0JScVZAK3xvNo2y1/vjXu+Nu8IjU3L4FDC2ZmVcVNB0pYjv69o9LH:bslDjXuQnIjUb4rVNeujzPZJ3ZIh1Lcz","tlshash":"87d3c4ceb3d2b06143a36171516f560bb23b6884b90b819cf239e4c97c7894da17be7d","first_seen":"2023-03-07T16:56:51Z","last_seen":"2026-04-27T06:14:51.233911Z","times_seen":1388,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/js/vendors/indonez.min.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/js/vendors/indonez.min.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2446\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8173), with no line terminators","md5":"d8eff98ef3988d6c7af793db9fe22632","sha1":"025ea473fae950ec0688f85d3331fb7b3a7e2755","sha256":"a48ad07746b805e120f5a36630ac80ede154946bd3a6fa75f217ed7abe371d7c","sha512":"3e84d0a799856241900a64313ef34a19ac543ef8f14a3a795818a054bd61b9a158c117e12ddd82abedac79167502c415daec10077014982062806b30573fb28c","ssdeep":"192:pBYln0U9TzGEBVKv09s6suU3NezW+HB4omruTOVKIOGk:e9JzGWwv8s6suCNeS+H1Gk","tlshash":"c8f195173460643a4ccf0aef70a75bc8b673144da8425096357c98ca0faad9e525bfee","first_seen":"2025-02-21T17:38:36.252316Z","last_seen":"2026-04-25T05:28:13.376186Z","times_seen":367,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/owl.carousel.min.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.091Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/owl.carousel.min.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/feather.min.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/feather.min.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T22:59:03.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 08 Aug 2025 12:55:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21912\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":163662,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8e308e449536c1be5fc6ae3bcf32c092","sha1":"346fb395da95b877709f30f4bfeb323f8f05e25c","sha256":"0794e797eea10d1613f7c06c7af5b9cd2de8f5d516fd6768bdb6e55001975b5f","sha512":"ebccf120d4b428449eab1020e22e0ecb80ca1dade2a77fe56cc94aa5d942adaad9e67f23182890282a323351f3981bc197a4be0c6ff9dbb0dfcc71466e0fb12e","ssdeep":"1536:WlApDf2mWYPUrh95cr8uWXaFY/heYqzVRWiBSLsaFvIq0bZKF4EbyGEYQxRDUi:WlAhfirh9r6EhexzqiaFv4gBbyCI","tlshash":"d4f36268a8f2243f6143c4e57666671abf91d903db1bca6036ec07e85fc3dd98a1324d","first_seen":"2026-01-27T04:19:29.822161Z","last_seen":"2026-02-22T23:07:13.39496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":127,"dns":66,"connect":25,"send":0,"wait":50,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/css/vendors/uikit.min.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/css/vendors/uikit.min.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25146\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242747,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"9248044bd3dd2ef3887d9f99cc132428","sha1":"92a61a9e7592dde6a793bc90dc0f1a75938bf22c","sha256":"d4b754a9e46368943b53c56a3d5d8da81b101b404d03b75d084df7c53ddc6c40","sha512":"0832579719f77dd79c31e43b1528f943f9021b72c19d2773be6c6879da7fff042134192a3614c05cd0f3259c59fd9d02bf6ee7c4ad3214a4ee2b3dd3534b1d6e","ssdeep":"768:vJALS/F894gpxCAXS2Y2soFmoZHSAVLkJf6tEsBjP2ets6SvsbsQsRBGsJh21Usx:Rw940E+lkJAfPck0/jRBi","tlshash":"d2345398a24075ff8d73059b90a8b5fdfb998d41a2362ee7b7ee82c14e047470135c9e","first_seen":"2023-05-27T13:25:39Z","last_seen":"2026-04-25T05:28:13.368833Z","times_seen":199,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/fonts/fa-brands-400.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capstockersprimex.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76612\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76612, version 331.524","md5":"a06da7f0950f9dd366fc9db9d56d618a","sha1":"509988477da79c146cb93fb728405f18e923c2de","sha256":"5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29","sha512":"b53d839c5464f7a2904cabcd1e7d6456e2ed1702254450833fc586f4b3a4e6dc07c24f443415a2710e241af8d2dda1b9c17f050045e76501e9b5aa2cb4801ea8","ssdeep":"1536:y2zPXSmtLX9JNsnZVJakesPqIqI9Fz7s4HiUljj7Gu:y2zvxtLXs9e2zYa7Zj7","tlshash":"977302d0a153149af2b02645f91ea4527c19b93c97dcf2643a3aff726ed480fd294f81","first_seen":"2023-04-06T09:36:23Z","last_seen":"2026-05-03T12:38:29.962643Z","times_seen":7625,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/owl.carousel.min.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/owl.carousel.min.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/img/in-slideshow-image-1.png","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/img/in-slideshow-image-1.png HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168203\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 862 x 540, 8-bit colormap, non-interlaced","md5":"327ecc10b6b18f04b5900f7ef98c54cc","sha1":"f690725ee57afe2118b97e08ced8a373c896cf91","sha256":"310049faba944e729ff5a60ebc3b1afb4cdb6606e7d0a7315c9e228cf588767a","sha512":"06d76ea9b988ee411220f96afb049ed52a3aa7ef6aff6cf606a11a3c6f0cd0f1f00e3c980aec7c01c9f13d2789b497e1da53a5ca62c0cc07c82f175064791f18","ssdeep":"3072:aN7yI3CfpXEcT5D8W4CNKzKdG4lokLrN0NnD3pXCA9K4Kb332et:aN+ISfBTgFKqqrAnzVCA9K4+Get","tlshash":"d6f313d4030675e67e3e16d8d9a7fcc6aef5190b098a3df00b02169897e38a6c95cdf1","first_seen":"2023-05-27T13:25:39Z","last_seen":"2026-04-27T06:14:51.215298Z","times_seen":253,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/bootstrap.bundle.min.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.082Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/bundle.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.098Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/bundle.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/bootstrap.min.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.005Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/bootstrap.min.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.html HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-03T13:28:33.565913Z","times_seen":123197,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/widget.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.155Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/widget.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/img/in-lazy.svg","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/img/in-lazy.svg HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 13 Mar 2025 02:36:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 244\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da937709390cfc0e7e13d400119afe5d","sha1":"9f4cbef0f1bdb2ff7d796a3806536f30ff60c753","sha256":"27c264510dfa72a3d29307af2a3477fd7fbfac851ade69b66666dccb5451f429","sha512":"5e0c27b2c2595acf2c9ab76535ed540cbc736bc598f00cc74796dbee72a64e1a2bf92fa07ff060e0260c30e526a6048a8e8182234e8c1e02c37345222bcb49bd","ssdeep":"","tlshash":"cae0f13cc830856505bac0b9dff91740020ca7e2010600daf3c40c7a788ca8fe8a4102","first_seen":"2023-05-27T13:25:39Z","last_seen":"2026-04-27T06:14:51.193813Z","times_seen":246,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/s3.tradingview.com/external-embedding/embed-widget-market-quotes.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-market-quotes.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 04 Jul 2025 10:37:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4300\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12933,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"7d5515b8a19c8dbdc8b7a3db058058a1","sha1":"a204ae2d5b78692cfe6babd3d95d7c3ba498dc5b","sha256":"ebd564396d5af94e58fd3a352f8f59e6d7c419fe5f318378adf6eb618f7b6cac","sha512":"3d95bafdfc054eae492845a9ec503fa695d98da98a88c09c2948d8a961b9944f4e6cb7e1a8393cdaad28fb60ff25401b648fafd138d64a433c270aa7e34053c6","ssdeep":"384:RO0qLuCWoofYkFdjFE9ST2XejuzVKFESVNaMEQ:R/q4tE9ST2XejuzVKFEytEQ","tlshash":"0b42d7aab670d8bd91d945cba07a2321b61d3954b207eca4b5acd4c510fdccca131fbe","first_seen":"2025-06-27T06:33:50.116279Z","last_seen":"2026-02-22T23:07:13.384753Z","times_seen":5,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/storage/app/public/photos/q1ZOifHCWZ21xFOuE5VYefIStyYydJjWGJPTqvQD.html","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /storage/app/public/photos/q1ZOifHCWZ21xFOuE5VYefIStyYydJjWGJPTqvQD.html HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 05 Jul 2025 15:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-03T11:16:40.717593Z","times_seen":40487,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://capstockersprimex.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Feb 2026 22:59:04 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 78268\r\ncf-ray: 9d2217808979b1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"613fa20b-131bc\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 749414\r\nexpires: Fri, 12 Feb 2027 22:59:04 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vavv%2BhznUwEzSUZ9sg8CRbUIUb5RQaBzTxJWO2e6Bdow4ZAp%2FUZ3oybxWN62ielFrvvfDPaSWsicbo4Zk%2BFObbnUu%2FZjDRXmePXe4Z8pco%2BIDiu6bYOgrYWrrUjHPReB5huIOQAj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-05-03T12:50:04.161008Z","times_seen":44185,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":6,"dns":1,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/css/vendors/uikit.min.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/css/vendors/uikit.min.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25145\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242748,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"6be1259a4974e1c0a5be8a91694ab322","sha1":"02f4a073d5ede5620616f3585eb34a53b9949e26","sha256":"1b3a8c346a585adf4b7b7beb86845e009882279866f6ac007c1de2a97a2aaaf7","sha512":"38bb9f82a2c024a3d73849d778f422e3912b9ad96d1e262cd9aa4fc2979f357e502968d3bfe608f53ef095228edcd21a5b996329caa4fc9646925d651479afdd","ssdeep":"768:vJALS/F894gpxCAXS2Y2soFmoZHSAVLkJI6tEsBjP2ets6SvsbsQsRBGsJh21Usx:Rw940E+lkJffPck0/jRBi","tlshash":"03345398a24075ff8d73059b90a8b5fdfb998d41a2362ee7b7ee82c14e047470135c9e","first_seen":"2026-01-27T04:19:29.831065Z","last_seen":"2026-02-22T23:07:13.380057Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/css/style.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/css/style.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 02:36:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18122\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112994,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"31dd9487928d038b750c043193b0ab53","sha1":"f2f6b85773103c7f79ad120bb00f1b7261d5737b","sha256":"96adf2cf4ce574107067a1f362217963dbf18c6020e32fa046de2ac553ab78ea","sha512":"abd78429b056d8b1ac44a7b4a40b1210e64af393543bc8f036f2683fb5fc932d06113d9b7dcd92b2e5db9a6b7adcd53a12d2eacfccd00b3d9746e58afdb726d3","ssdeep":"768:VZkqsO/+v5FkZTGkvM2p3kM5emVvTejzZZITUV/ZfqndygFyAY2UbkheesDmrv8Y:NsOWQTGk5kK1VvaHIgV/Zfq8OKAl90Y","tlshash":"b6b3cbfcd11f00965333daa0a3536656fb25763ffe411958f296aa8c9fe0125a182fcc","first_seen":"2026-01-27T04:19:29.781128Z","last_seen":"2026-03-15T04:04:49.761279Z","times_seen":15,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/fonts/lato-v16-latin-regular.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/fonts/lato-v16-latin-regular.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capstockersprimex.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23484\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23484,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23484, version 1.0","md5":"b4d2c4c39853ee244272c04999b230ba","sha1":"c82e22dde9716c40ba20e6c7ed03a1b66556de15","sha256":"c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1","sha512":"d315d6a4e28bb125128d3a4d99fe120e383061d367341f06c4b74a589b4ca29c516cbc8d23ddd37267a1e4497c74fd58b1dffd39cb70348b8a3ea3d48237f8ef","ssdeep":"384:iXFbv7T+soFz7IbR/aBa639y2FNedPuzHQ1eGcYe3mkGtapwx/vX5htghzvcjvm:iXFzP+soFP8RQty2FNedmzocYe3DqapT","tlshash":"40b2e1778269aa70d6d01bb5ffc112a73a79589245d5e3a34e409b02442c73f7eadf40","first_seen":"2023-04-07T01:34:48Z","last_seen":"2026-05-03T13:01:27.247411Z","times_seen":3294,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/fake-notification-min.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/fake-notification-min.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 02:36:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (643), with CRLF line terminators","md5":"0f46a238cbd11ecd4c34398cd88fe05d","sha1":"904d82352b0f45cad8d98cc7416c265a0cf0e1be","sha256":"27ef53faac17a2fcf938097d718cbf926cc54f9b35d79815c26ea0e219156d6b","sha512":"a99c4ee17e2837697af6a564f0a1eada3eca0eed1fc73dd9e4ecf5c26e4b6485c0631e1f9395539665f15335f18ee9370beec61665df928c8b7b7d852ac1dbc9","ssdeep":"","tlshash":"c21144528133a0c675b5827b35132df57033854e7f131490eb93af21c146b9a3b4130d","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-05-03T06:16:01.44556Z","times_seen":574,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/tv.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /tv.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 21 Jun 2024 09:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6088\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21667,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"b323597ca8d071521517a0fda07c1128","sha1":"b624a675aad3ff9947cc083d301c1b992f9af9f6","sha256":"cd5f4c134b6aa63bc8d4c35b1b1a9f27d2db6ab6e666bafe44b9e1b13251ef09","sha512":"3e591de7af9419cac3e9938b9f19d369ab0ed4722b882f0e437c9be9f6298ed980bc375cc1ff34508e9eca9b367507b2b407716b206e649f6868b2ff335b7363","ssdeep":"384:h3B170pujp6fppopUM0Z7wNOmkS/paHVSo5tQ0Di4ELWJiVavqal2i5:h3770pujp6fppopUM0dWO8aHVSo5VDi8","tlshash":"51a2b76df1817a3c068700ad606b230c76377564b1028da4fabdeae09558dcea177fbd","first_seen":"2024-06-06T05:54:44Z","last_seen":"2026-03-20T05:01:57.89485Z","times_seen":30,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/css/style.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/css/style.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18110\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c99bee2a3cec2a5d09d187b8230b79a6","sha1":"ba9924199557e00b081cef70baddfda1c702f65b","sha256":"c244b406170359fe59b3a846b1713612226c539ccb2eb45c98e29bcba49dfc82","sha512":"46e1b998c790064c33a5db2930e6b36238c337202221d7436243c4d163eb93c91b52b00ec4ef5fd044392ee76f9ef5e8affe36a63912d490d64057db3a51fd5f","ssdeep":"768:VZkqsO/+v5FkZTGkOM2p3kM5emVvTejzZZITUV/ZfqndygFyAY2UbkheesDmrv0Y:NsOWQTGk+kK1VvaHIgV/Zfq8OKAl9MY","tlshash":"f3b3cafcd11f00965333daa0a3536656fb25763ffe411958f296aa8c9fe0125a182fcc","first_seen":"2026-01-27T04:19:29.77194Z","last_seen":"2026-02-22T23:07:13.376626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2020 16:05:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-05-03T12:52:27.934154Z","times_seen":34238,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/storage/app/public/photos/weYBvjIkd7FHiVThiIdLVMXvpmlrBLfbwYESz6g5.html","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:05.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /storage/app/public/photos/weYBvjIkd7FHiVThiIdLVMXvpmlrBLfbwYESz6g5.html HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 05 Jul 2025 15:02:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Sun, 22 Feb 2026 22:59:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-03T11:16:40.717593Z","times_seen":40487,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/fonts/montserrat-v14-latin-600.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/fonts/montserrat-v14-latin-600.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capstockersprimex.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19264\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19264, version 1.0","md5":"6fb1b5623e528e27c18658fecf5ee0ee","sha1":"b651cb01dfd237d1ea67a88e13f7e7a65ebdda34","sha256":"d10e701c44ab739c7d711b6483def0c6cd47e5a3d04eda1df2c5cbb08f21d81a","sha512":"e47265e67e3706ba13c3c2aa0525547185cda8e69c01fcefa130595cd04e5f8c626e011ca9f8a4fef455a8ec805f450bc4c99b153bd80b62a3ff8399fcab7184","ssdeep":"384:eBGL+fDA1ofJdtZtNMSOtYNBRO9V4V1SfkTh/SX69qJKlIkcHSPqou:LL+01oDtZMSOtYf8n4VcMcdKKkcHp7","tlshash":"0782d0c353e84c37f00ee03b06ee138f5d629a5a1c8f1e34a0a52475b7f69635325d60","first_seen":"2023-04-10T10:22:49Z","last_seen":"2026-05-03T10:41:01.70662Z","times_seen":1854,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/magnific-popup.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/magnific-popup.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/owl.theme.default.min.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.014Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/owl.theme.default.min.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/unpkg.com/aos%402.3.1/dist/aos.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Apr 2025 17:16:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-05-03T12:52:09.256294Z","times_seen":17867,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/line.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.008Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/line.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css')%7D%7D","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.1.1/animate.min.css')%7D%7D HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9d22177ddd5ea0f0-OSL\r\ncf-cdnjs-via: cfworker\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=shGv7c4WgNM45lTTMBu6lDeH7jfghBt1fBjsGyNQtOVGgiU9D6JeFcilFo5cSpicRUq990tNRI8fYcCKomoB12ibY3knBxgXFVM%2B9rd9kEnqd5k9BxB3jte%2FUrA761Su9gMjOK0s\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":19,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/jquery.fake-notification.min.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/jquery.fake-notification.min.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 02:36:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1184\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3570,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1999), with CRLF line terminators","md5":"13d39a7d682712fef9676e8ce3f6a8ce","sha1":"1c04189c1270cde1219efea0c349b230990b9ff0","sha256":"a2e77918046fe456ba3d874ccddd3d0bf40a9774c0ffe5d70b08e069b777e847","sha512":"73f0bc1a545a05d7674530d8c8178dccbdd06d1a54851749d1210a1e8e4fc1ccbba7f757b724492ad4d1a08ea2e1e6444d1a8a956259a613df204fae8bc074f9","ssdeep":"","tlshash":"a17172df2251602e53e7d03aa9dff4c48632121ede460629251bd06e9ae437c638fcd8","first_seen":"2023-03-11T14:50:15Z","last_seen":"2026-05-03T06:16:01.477339Z","times_seen":530,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/js/libs.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /js/libs.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-03T13:28:33.565913Z","times_seen":123197,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/js/common.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /js/common.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-03T13:28:33.565913Z","times_seen":123197,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/flexslider.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.009Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/flexslider.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/animate.min.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/animate.min.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Mar 2025 02:36:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2503\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16755)","md5":"7da1b41592f039eecd65d604482c10e1","sha1":"e966ec2885d74306b80253ef057ea77546b2c149","sha256":"0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1","sha512":"d7e98c416ba684d035ed581279aa30fc4de291d8c15686336bca6f4df677c2ae3a50de16ca56a3b8a26f2f07f20f8ef3c063385d49772f70835707372aabee4f","ssdeep":"192:Byq6Vn0u6SBWTRNS3DW5WfW4vLYz3i6PSz/hQQHL:BV6VHTgH4vLYz3i6PSbhTr","tlshash":"46725d4c4a50105941a60773dac89fac863dcbdb68722cef3396588f4b457ee23ea617","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-05-03T11:23:47.580376Z","times_seen":2242,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/new/js/config-theme.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/new/js/config-theme.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a484bba8e097a3a5add6a376eecd699f","sha1":"cdd84d445f40250bfaa6e48909477935295dbd36","sha256":"433a3a8c9239bf5d11ba184ae7b089481fbe95f78c2a7f3aaba56db455d58937","sha512":"8480b9d77d87c8b0d86e0284deb3741344ed9ac1656ed94fcc784e81f670c95d3848ee40385c5528d63a8a27380a3a859f5950dffd189eaeb91a47280914eeee","ssdeep":"","tlshash":"2821aa099c45102a9972e77eb177e122cb713b673702498d7efd02040f73526128efd8","first_seen":"2023-03-10T13:27:41Z","last_seen":"2026-04-26T05:53:53.194646Z","times_seen":1116,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/cdnjs.cloudflare.com/ajax/libs/Faker/3.1.0/faker.min.html","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/Faker/3.1.0/faker.min.html HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 05 Jul 2025 15:03:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 377\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":900,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7a58a82e79689c4ca5af3d97d17359fd","sha1":"9d6b392dd69e78127db9a02130948538d8e50e04","sha256":"54e35b48d42f796a3a300dcbe780345b02d1cf436e201c219f941a0239bd3be3","sha512":"b1d6438d740992991a49300bd443d8513e00cdc7c73bc3a143c69c229f6353bc76b870bfeaad5a891b26d49e7a3b173cc7bdeabd98e301d2cd5656d06ba9885c","ssdeep":"","tlshash":"fb11236f44211ebe2200c5627010722dc0dfef1b6f427450e46325b66bd4ec4c97e499","first_seen":"2026-01-27T04:19:29.819478Z","last_seen":"2026-02-22T23:07:13.441793Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/lib/jquery/dist/jquery.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /lib/jquery/dist/jquery.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-03T13:28:33.565913Z","times_seen":123197,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/js/vendors/uikit.min.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/js/vendors/uikit.min.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40683\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132804,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"7c6c0030d4b14e7d0c8a2015b7843e6f","sha1":"f56bb163d43fadb610c06d878281fa5a9315ce8c","sha256":"2e20d5699ee7575d3ba7f020ce63869e10b7cfe9b5f563b6c8df0b2372404391","sha512":"24ddfa9d2ea57953a0a469a5d83a5c55b86f204844951034428cb739ab6a9dcbd2a2c3d149992af664c41a86dfeca78b52f374b5a3c84b9ee23f38273f8da408","ssdeep":"1536:3COqwCrlHkY0JScVZAK3xvNo2y1/vjXu+Nu8IjU3L4FDC2ZmVcVNB0pYjv69o9LH:bslDjXuQnIjUb4rVNeujzPZJ3ZIh1Lcz","tlshash":"87d3c4ceb3d2b06143a36171516f560bb23b6884b90b819cf239e4c97c7894da17be7d","first_seen":"2023-03-07T16:56:51Z","last_seen":"2026-04-27T06:14:51.233911Z","times_seen":1388,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/fonts/fa-solid-900.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capstockersprimex.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79444\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-05-03T12:55:28.21529Z","times_seen":21993,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/new/fonts/lato-v16-latin-700.woff2","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:03.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /new/fonts/lato-v16-latin-700.woff2 HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capstockersprimex.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 02 Dec 2022 07:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22992\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22992, version 1.0","md5":"1efbd38aa76ddae2580fedf378276333","sha1":"8a49976f2470ba2a1db6144245355d3b889312e4","sha256":"8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20","sha512":"dd16efd323a38dad99a105e7443546e112ff42158018c885091df498c8c5b88c4d83737b4887332ea54ef3a83483e660c783073c4ce61fca4098d24aac05ed6c","ssdeep":"384:i8dkfSOTyQBgarmZBcC60rEJq/VcteWhh/nqgYA7L3ittJ2MY+0K7YXr5eC:xfHQBgGmZBtnytL/tYSLStDJY+0K0bD","tlshash":"5ba2d0ae5a223af4d77235a4d1bc351db3ddf0c22193e90e73e77138cc7a6451182069","first_seen":"2023-04-07T01:34:48Z","last_seen":"2026-05-03T13:00:40.088503Z","times_seen":2139,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/materialdesignicons.min.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/materialdesignicons.min.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/style.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/style.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/css/colors/green.css","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.016Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/css/colors/green.css HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/unpkg.com/aos%402.3.1/dist/aos.css","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /unpkg.com/aos%402.3.1/dist/aos.css HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 May 2025 06:46:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-05-03T12:52:27.934154Z","times_seen":34238,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/img/in-lazy.gif","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/img/in-lazy.gif HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 13 Mar 2025 02:36:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 62\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"41385ba97e8e0cc765df29a727bb592f","sha1":"81336d526f860080d64e5f0515514d189d190083","sha256":"47b7befcec2f2dde8bae8ab0e46878b1986247c47df68343353ce18c2e805b78","sha512":"e2a993e7ec47c11808d6590faf65bbb79beb931ad199d9d799810e99ff0c1f038b3c45772036cae6fd127cd7a6d2889ea9e4a82fae747902e6a0b94b3ec849fd","ssdeep":"","tlshash":"a9a00207d5555105edc29074455857185b8472f44598550d446c5155dc1616f0e00402","first_seen":"2023-05-27T13:25:39Z","last_seen":"2026-04-29T04:31:34.598681Z","times_seen":446,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/wp-admin/uploads/testimony_4888a96e03bd608a5c860d2add5c8d9e.jpg","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/wp-admin/uploads/testimony_4888a96e03bd608a5c860d2add5c8d9e.jpg HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76603\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 750x762, components 3","md5":"8e2ed50860ad70703ad39b740885fdf3","sha1":"e54a08f6ae92ce88ac0a8718d91bb809fcc26fdb","sha256":"a2dfef7a1b1c7d84a837d65bf90ab2808daafb442f3c3851d23e97f767404817","sha512":"dc8375a2233250e8ec2ca7b978a8758ca0d8f4e2505fd572d9ad12ffc58be837efd4cfd73a2ef47d2bf5970fec873fa3308647d2081afaf8e0364a085f20892c","ssdeep":"1536:5d1bMZfpHqBhbyN1QUd5m2Dm5hnzPkc4jJaP4Vk1:jJWYrq1QMmJPnAIj1","tlshash":"7f7302e90a416472cf888e16d019c12e5bd3f4d5fcdf9e4590e22c83e1ea4e9f1b2a5d","first_seen":"2025-01-27T03:24:30.20671Z","last_seen":"2026-04-25T05:28:13.378101Z","times_seen":107,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 09 Oct 2024 12:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6986\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23682,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23595)","md5":"8ba9ae207bac594dd7988a3c1fa31c68","sha1":"6a8469dd6b8f9f37c8bba5ab38495fafc00f7940","sha256":"0d3aa6c677df7db16a3a5e6aa6a6499425e6017e2a6b3af63362b9ca0ec04e5b","sha512":"37db83bdb0e91030f96b858ffcbbae74ab68e442fa6fabd6cb46da83c8a949d677a77396cb19e0282866fc244b00baa71ea79ff67b4c0e8a45c4fdde2ef03e7e","ssdeep":"384:hGa7he7wDhA2hmwqU3o+Vpfz3y2uoeanPkmguyq865CFb8EpHN4yFnSR695:hGa7he7UATwqU3o+jz3y2uo7Qq89ZpHp","tlshash":"aeb2e5e931a1b47642ca607d543f6209b2b23468b985d488b53dc8f66fa0c9e3137f7d","first_seen":"2026-01-27T04:19:29.77879Z","last_seen":"2026-02-22T23:07:13.374774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/app.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.152Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/app.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capstockersprimex.online/bitopt/wp-admin/uploads/testimony_a7829d2fd6fae692623e74d538369a69.jpg","fqdn":"capstockersprimex.online","domain":"capstockersprimex.online","tld":"online"},"ip":{"addr":"94.130.140.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capstockersprimex.online","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 19:15:09 GMT","end":"Sat, 25 Apr 2026 19:15:08 GMT"},"fingerprint":{"sha1":"5D:A7:E0:52:4B:F0:B9:01:77:6E:EA:82:CD:38:89:9D:F6:F8:3F:F5","sha256":"CA:DA:1B:4D:3F:A4:DF:F4:57:A3:61:0E:50:77:19:31:2F:AB:07:5C:31:EF:7B:96:E6:FD:44:E8:E8:02:B8:52"}}},"request":{"raw":"GET /bitopt/wp-admin/uploads/testimony_a7829d2fd6fae692623e74d538369a69.jpg HTTP/1.1\r\nHost: capstockersprimex.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 01 Mar 2026 22:59:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Mar 2025 02:37:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25068\r\ndate: Sun, 22 Feb 2026 22:59:03 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3","md5":"d9a74774afcc7db2a3105fe7778e7d29","sha1":"94bd73f6a00d6de76a175f514ff87444e039283f","sha256":"278df0eb22effba9565cf9d1974d8d6b6cba21af1e79249e5d4b28707dddcee8","sha512":"eb22ddf74f3b1e2dceec19560e319ef6b0b997a90f40d6f8ac7284957bcd7bdcb03b2ab28bcba0e719f95c9b750fcf05720b0a82f22fd94bcdfe5277e4347ea3","ssdeep":"768:xIll+SZxbhKFRHpFwdAkGfh7OfOYk12njUpjM:uQSsFT6dAz1OfOYCoQu","tlshash":"e4b2f1d74b886ac99b7ee3965e7541b35c0b9c4faa4bc88b04f923cdd2d0615e084bd2","first_seen":"2025-01-27T03:24:30.208182Z","last_seen":"2026-04-25T05:28:13.355336Z","times_seen":107,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"capstockersprimex.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centralfeud.com/themes/purposeTheme/temp/js/jquery-3.5.1.min.js","fqdn":"centralfeud.com","domain":"centralfeud.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capstockersprimex.online/","date":"2026-02-22T22:59:04.079Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/purposeTheme/temp/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: centralfeud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capstockersprimex.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}