{"report_id":"f480dac0-9dd9-45f8-b422-f8cd8315aa78","version":6,"status":"done","tags":[],"date":"2025-09-17T09:16:40Z","url":{"schema":"http","addr":"trustfundscapital.xyz.nicoil.xyz","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"title":"Trust Funds Capital"},"submit":{"url":{"schema":"http","addr":"trustfundscapital.xyz.nicoil.xyz","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-22T09:16:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"52.28.41.203","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":425291,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":379,"sent_data":557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":101861,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":25146,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":491650,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":18645,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":0,"sent_data":934,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trustfundscapital.xyz.nicoil.xyz","ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":48,"received_data":3115625,"sent_data":57938,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":286,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":35041,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"423b71c9d86a315068d147198d3ebeb5","sha1":"dd2481c42dcd68d8b030db77051cd742e2fc27af","sha256":"c8ed763678016b82631d5c7b964f6cf84ca825b0adf9cd2eaa39d105ef6b0958","sha512":"265093517e3447260829f1ec0a4221988023c92319cc99cffc8b277a37a1fdd825c085ace6ba4674ebda81ecf5f88b7efc0156b9c74e7a91a7124a060db636de","ssdeep":"","tlshash":"e4e06f3d3c3580954ba200b881bbe2283e1a30704084d95798aa88696cf0fcaae02ad9","size":378,"data":"","first_seen":"2023-05-10T02:14:33Z","last_seen":"2026-05-06T15:48:37.657384Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae2afe715e7b359acdb01d1e0ee465a7","sha1":"ca576191d914a795ead139407a82e312c26860a8","sha256":"8b5216b90b2a30d2c0c3a0bafd07316b7ec9811a13ea0e5f3ec034fb894615f7","sha512":"d68bb7a9fc864598d8e297798ebe585482d7a1473189335c3c9dd7d8bd915f3afc1dc81238b9ff456f10ac286c9f3894af48a8425015013d20222d48f71a21d1","ssdeep":"","tlshash":"49e0683d3c3481955ba250b442fbe6287e0a30604455ed5798dec8796cb0ee9be219b8","size":410,"data":"","first_seen":"2025-08-08T07:19:44.42639Z","last_seen":"2025-09-17T09:17:06.063668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/bootstrap.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","size":95320,"data":"","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-08-13T05:15:45.380182Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/owl.carousel.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","size":61379,"data":"","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-08-13T05:15:45.39789Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","size":89810,"data":"","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-08-13T05:15:45.391157Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/all.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"800a9eaf2195f34097d9a711473aef43","sha1":"9be370b676f037c24f879d6b79b25fc678011618","sha256":"9aff2f0629bb20834dca9e31014a7c0bb5004b87ea38322921ab2b04e9cc9682","sha512":"cb928f1a5fb4abdca91228364d82a809d8458504faa78c4e796df61c8a7ac321a1cdbe75e78bfa6484349336a674f239d7ebea31214a99c5c2736ec94e07460c","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8eK8wDKSG:MD5cEJhswtRww3O3l0r","tlshash":"1f45d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1195004,"data":"","first_seen":"2025-04-16T16:49:09.298755Z","last_seen":"2026-08-13T05:15:45.418158Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.easing.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","size":4137,"data":"","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-08-13T05:15:45.402434Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","size":152478,"data":"","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-08-13T05:15:45.405787Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/mixitup.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","size":121918,"data":"","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-08-13T05:15:45.396904Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/wow.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","size":14974,"data":"","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-08-13T05:15:45.397407Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4afc0f7c5f07c5a98fb4d74543aa14d","sha1":"844f5652bef0c4c3215a3b94bab44b6fcd16852f","sha256":"732bc46045d54106ca17e5527104293fd5bab96e47fe512a9f14e4b1002f1fbb","sha512":"3befb781383f8b9a58edcb79d257b7fd42613b349312b012da88efe70596764182d0643c309604ef427fe5f4b90ee87240db2f184d95b73d88dd955c1f9f8703","ssdeep":"","tlshash":"60c08c188032a078000a210c8eba2292322041f70e163d24b39d954a0f0aa4f83b939c","size":181,"data":"","first_seen":"2025-04-16T16:49:09.320118Z","last_seen":"2026-07-27T13:32:39.240082Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7649d9dfbab8b326ade8c50206f8ef45","sha1":"14d8499d021776e65b81abdefcdb991d2fec9507","sha256":"e1d5ddf29bfc4df6ad3becae0cf38d3d3cd4692fb96af2b7fb232d425d24bab2","sha512":"63273fa12f1133d72f64be379fa55b54268d2388691ce1a94607aac7a5fcb3fd79d1a2eb70c0b2a5f0b7a68b716084233c9aaa61b4947c5870aadfb3ba2bd30c","ssdeep":"","tlshash":"5c11ed7b3d84e639869ca4e4a03fc31cf1b224957c50cd9110cee889e65cacadd2d5bc","size":993,"data":"","first_seen":"2025-09-15T19:09:44.364391Z","last_seen":"2025-09-17T17:08:43.831301Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","size":33461,"data":"","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-08-13T05:15:45.409769Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18294d805b9dd9f5010fd0643d8fbd2d","sha1":"73bd43e75d547ff4095841766f3fa21885457b36","sha256":"cf47c44a4cf0ae64543a5d79d5b6d0558633cdf48ae72dec131b93ef16485d12","sha512":"07d5bdb39b1f289c838a5417a228649975ddd0342c37d5f210a10f5fe64b00abf1f210b551b80d04f76de314c3d91f06ebcb244c7444c0f5d11b0dbfd48e4de7","ssdeep":"","tlshash":"2bf07dd979a704b0dd5bf03e4bba22a522658e0b2805e1123d1ea5225f44a41827cff8","size":632,"data":"","first_seen":"2025-04-16T16:49:09.321626Z","last_seen":"2026-05-31T00:41:59.123557Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-09T02:43:09.725737Z","times_seen":2971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eb52389bbfd63e366640eb6a8782643","sha1":"c23cb9c0bfd70c8609646ae0f213a8388ae8caa1","sha256":"e078d9a0f5ea678a28e1774c697db59a2c742591a53f796f4a380cbec67cf5c9","sha512":"3108ff41366be168c6f42bfb7674136b8592a9288f18155622bec8256baef6ad84bb00480ff951ef8316b0e3193ebe44b59ffeef8cfedd5ecde7a921b4d1204c","ssdeep":"","tlshash":"a3b01228715c7004743321b14c17a8003911bd0734065800fe0c1ce00f08548c507844","size":93,"data":"","first_seen":"2025-04-16T16:49:09.323421Z","last_seen":"2026-05-31T00:41:59.124434Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/scripts.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","size":15476,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.392048Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-14T21:13:08.483837Z","times_seen":100644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/9bae1a63/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38888371b017f120762db1d3b77c4288","sha1":"161fb4b884b9ea2662c1f9aead20300d227a1c71","sha256":"66a38f8c3ee491e0f2bde114cf82220a5985f5c6eb74ba2b98a227d81cabecc6","sha512":"832902e41c8978b36ed0261f7edd93139d16a6357b369c590cf2243b6b11696070421d8201cad9cb0a79c5b98bf16c407510855c9a7d6c1f06c408afd763529a","ssdeep":"384:Td4tAE658O7nfTwushZKjDOYjPncmXj2Gv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:T+AV5PfchQjyYJjfV4jLlUS6UKZg","tlshash":"2ed2c6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb59694637f7e","size":30663,"data":"","first_seen":"2025-09-08T19:19:45.811667Z","last_seen":"2026-05-02T21:54:17.300466Z","times_seen":1677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c56854366626bf879e4eb5a16bd8b98","sha1":"53cd6c5bb59897d8c49275a8087cf55fd3a4eca7","sha256":"f20826b83380a78cde570c8cb621f228ea37bf65190532f188423104d4ca259e","sha512":"1a6649a3c78600e57457a29bcc027f1d60489c88961decbd101c5945ccc85c0987d9b24f4940bc43f792cdcafd80d53ee57d75ca941688b774e4bdb039746c6e","ssdeep":"","tlshash":"71d012af11404973dfb212a58b873354b63961ab1e0a57127890a601ff6de03c72ceca","size":197,"data":"","first_seen":"2025-04-16T16:49:09.325356Z","last_seen":"2026-05-31T00:41:59.12585Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.countdown.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","size":7397,"data":"","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-08-13T05:15:45.381408Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/popper.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","size":37178,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.408276Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e73cac843f52ccb3e407eb4c35833b","sha1":"63c3cbc76b196e7b5ac0c85c2f23b1059405a3ae","sha256":"6592380ebb853e62192de42281ba40b10dde7ed3284317cd69c5f18628d9bbae","sha512":"a2e20c1847617120e907f514fcbd7aa0c213b134aed7ef18f4ecdd85310860e181c682b7090a43e481ce2dd85773d903185c621a6f0d30aeedd4cf1b76113f5f","ssdeep":"","tlshash":"98d05b9336b5002c4ffe18965611e7843526d3161d519068753b1d144f54f44a1675c4","size":242,"data":"","first_seen":"2025-04-16T16:49:09.326654Z","last_seen":"2026-05-31T00:41:59.126369Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 422\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-07.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-07.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3448\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19e897af73d97018482aa1e0f78cdcc","sha1":"76f2342bdb0a4cf9a595c6822c79a04aaedba6d7","sha256":"b927b2e10953b20c99e848b6b9b101db928bf73193a0ec6a72e75aebad08662b","sha512":"18f4c4095a26f3c3a8cd3894ec86f1532e1096a9202f67f9db32712195fa033f6b19316137e945a9f53fae5190ac84b2525ad832b1d528bc5dcaa913722a4e4a","ssdeep":"","tlshash":"51612d68d9414ad117dcb3d514f341e149219980cddaa5b56fd8f8570a022f671178e7","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.384687Z","times_seen":243,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/customstyle.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/customstyle.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1541\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a1ae24bf6f813e147677647e762fc912","sha1":"5bf79ee2685fc94cfcdbd8011ac411f685e1a5e3","sha256":"daec1d9695fb37769643d97e5b9040a213ca6daeeecf9726033bdebe474d3d7d","sha512":"33626e32e5f7bb64699a23c39034824b6002c0f895beccdcc89f95edef83c9b74fb198d55122af619c3aa9412194a236ece85192ffeb11509a04df08e78981c6","ssdeep":"96:xkyRNTHQ1zl5+AQRRnbfdfc5SRPdRff8f5EW:xkUNTHQR2AGVbVUARPdRX8f+W","tlshash":"e8e19a1aea110602643ba376e7a3b35def6a4013c30195f87fcd72644fb56a88765f8c","first_seen":"2025-04-16T16:49:09.309316Z","last_seen":"2026-08-13T05:15:45.396415Z","times_seen":177,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/avatars/2.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/2.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40309\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"fa34908c05fa685dee8c7f0d37d3e1be","sha1":"bd41c332afdc57c496152b42f068097fffd71b4d","sha256":"c79c0fbf58e412c0ec0a1bd1a5806daa30bb3ff657bb4577c2d595e628d8b268","sha512":"de8a3ca78207c7a683a1e3ad3bec196e85a10d0e8e118576edc6bb79032c23df1d3dc9c39630ea68bc226adb6cf4d5b809753ef44b51e7aab506fa5869a21f5d","ssdeep":"768:pbVw5YCxlRVA+vQ3knpIqcsPoJdDHctrTkknh6W:pbVaYA/AXWPonQ9Akh6W","tlshash":"0603f2ca9be82145eba955b8d9e3df59d76a80e9d03233e2bb5506738b3de03c05047c","first_seen":"2025-04-27T11:22:47.435561Z","last_seen":"2026-08-13T05:15:45.384202Z","times_seen":175,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/popper.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/popper.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8482\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (639), with CRLF line terminators","md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.408276Z","times_seen":252,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/wow.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/wow.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3141\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14974,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (482), with CRLF line terminators","md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-08-13T05:15:45.397407Z","times_seen":263,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/owl.carousel.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/owl.carousel.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12473\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (785), with CRLF line terminators","md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-08-13T05:15:45.39789Z","times_seen":278,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/img/bg2.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/img/bg2.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78521\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"c429d9733f122b3f75dc09895f087f7e","sha1":"4afbefdcfb97514632a2ac5ce5d073bb3753af16","sha256":"2eafdcde00be6fd6f5022cf0cb185346ba43ab31c6d61570dc290726961433e2","sha512":"3da8639538bd118629ae730a4a254dcf68498c21cd8ea87155d5a311c33b9261cb8ae11bd4e8eda2cf27089c87e924374ee2e0693015e8d5ab1d54ce8d3b403f","ssdeep":"1536:kdLpweOva+ivOr+ZKbs9TOZjxIUov/IAtMTIwV5yeaI4lFPRXa:kdLl+ivOr+48SZ1II3TIGyea/Pha","tlshash":"a9730253b705e4c7f430a4579566bde8ffd58bdc26a1620a7623edbdc802f041a84a2e","first_seen":"2025-04-27T11:22:47.441839Z","last_seen":"2026-08-13T05:15:45.410484Z","times_seen":158,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/img/bg3.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/img/bg3.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88995\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"69ff45757b6e20447b2131872dc18ce6","sha1":"089ab299ca4280339284790f4f1a80eb4c4c7724","sha256":"ac71b33e3b6ff0368a3555a627981510128f559b4f5e6b95217db047bdd21eb5","sha512":"e09f7e0cee68c7a64b8a29038c4410b62dc6d071acccc802c02679bebc1e7fa486d29972cf4fa71687bdff696a3e95724f447061988e2b2c671798752bc3d899","ssdeep":"1536:SwOdIzUxAVT7/f0vTdCdsTLgDqRthUprwVJNxvctXCIDxG8fgISwchPyC:SAUyVTDf0BCdXuVUh8xGLM84Ig9","tlshash":"029312207b109ca4866c2d7781ae3e4a6b199d9e8e53bcde14b0d260d7047974b3b3ec","first_seen":"2025-04-27T11:22:47.40106Z","last_seen":"2026-08-13T05:15:45.381979Z","times_seen":161,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:39:47 GMT","end":"Mon, 17 Nov 2025 08:39:46 GMT"},"fingerprint":{"sha1":"F9:0D:6B:52:9B:02:94:79:6F:66:5E:99:BA:02:05:E9:13:79:85:94","sha256":"C6:8F:33:FB:A2:A4:D9:3A:28:2E:A9:DD:1E:E1:73:83:2E:94:AE:8E:40:D4:13:43:2A:90:66:65:A2:98:09:4A"}}},"request":{"raw":"GET /iframe_api?v=3.2.10 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist\r\nexpires: Wed, 17 Sep 2025 09:16:20 GMT\r\ndate: Wed, 17 Sep 2025 09:16:20 GMT\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=qrGrzfibcPM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Thu, 22-Dec-2022 09:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=sN_-gtF0nDQ; Domain=.youtube.com; Expires=Mon, 16-Mar-2026 09:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiBZ; Domain=.youtube.com; Expires=Mon, 16-Mar-2026 09:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CLKmmsPW7MamFRCJrbSEu9-PAxiJrbSEu9-PAw%3D%3D; Domain=youtube.com; Expires=Mon, 16-Mar-2026 09:16:20 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"7649d9dfbab8b326ade8c50206f8ef45","sha1":"14d8499d021776e65b81abdefcdb991d2fec9507","sha256":"e1d5ddf29bfc4df6ad3becae0cf38d3d3cd4692fb96af2b7fb232d425d24bab2","sha512":"63273fa12f1133d72f64be379fa55b54268d2388691ce1a94607aac7a5fcb3fd79d1a2eb70c0b2a5f0b7a68b716084233c9aaa61b4947c5870aadfb3ba2bd30c","ssdeep":"","tlshash":"5c11ed7b3d84e639869ca4e4a03fc31cf1b224957c50cd9110cee889e65cacadd2d5bc","first_seen":"2025-09-15T19:09:44.364391Z","last_seen":"2025-09-17T17:08:43.831301Z","times_seen":92,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":74,"dns":2,"connect":20,"send":0,"wait":39,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/9bae1a63/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:20.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:39:47 GMT","end":"Mon, 17 Nov 2025 08:39:46 GMT"},"fingerprint":{"sha1":"F9:0D:6B:52:9B:02:94:79:6F:66:5E:99:BA:02:05:E9:13:79:85:94","sha256":"C6:8F:33:FB:A2:A4:D9:3A:28:2E:A9:DD:1E:E1:73:83:2E:94:AE:8E:40:D4:13:43:2A:90:66:65:A2:98:09:4A"}}},"request":{"raw":"GET /s/player/9bae1a63/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10185\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Sep 2025 07:31:48 GMT\r\nexpires: Tue, 15 Sep 2026 07:31:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 04:15:32 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 179072\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30663,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"38888371b017f120762db1d3b77c4288","sha1":"161fb4b884b9ea2662c1f9aead20300d227a1c71","sha256":"66a38f8c3ee491e0f2bde114cf82220a5985f5c6eb74ba2b98a227d81cabecc6","sha512":"832902e41c8978b36ed0261f7edd93139d16a6357b369c590cf2243b6b11696070421d8201cad9cb0a79c5b98bf16c407510855c9a7d6c1f06c408afd763529a","ssdeep":"384:Td4tAE658O7nfTwushZKjDOYjPncmXj2Gv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:T+AV5PfchQjyYJjfV4jLlUS6UKZg","tlshash":"2ed2c6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb59694637f7e","first_seen":"2025-09-08T19:19:45.811667Z","last_seen":"2026-05-02T21:54:17.300466Z","times_seen":1677,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/themify-icons.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/themify-icons.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2748\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (328), with CRLF line terminators","md5":"fba3cdd3ecf4d9b4355e13af6b632f13","sha1":"12f413adc203313fd0fbe1a000e77dc61edd873f","sha256":"3a02e0315d6259facfa5d69c2ff34559e80b802b92a5f57ab4a18538bfe43330","sha512":"81dcf645b09fc5151db59d55b23051a191d2d910745e5d6526f5a87b4a06b90bc2a5c8c8ba2f60ef832a0e9af158e8c5339284b39197084d96e683c75497a507","ssdeep":"192:EtlTgzkORrPbfc7awA+PsdkiKUxHYyObuFMqQY9dlY52egvDARVJmzplQJ/:4gzDPkCzTkYXRbMilQZ","tlshash":"9792d0f8906f14a65723da51e3436a16eb05b636db420c5cf293ee4c5ee3a21d1c2edc","first_seen":"2025-04-16T16:49:09.299742Z","last_seen":"2026-08-13T05:15:45.390565Z","times_seen":175,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.mb.YTPlayer.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15576\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89810,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606), with CRLF line terminators","md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-08-13T05:15:45.391157Z","times_seen":192,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/mixitup.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/mixitup.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22826\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121918,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (997), with CRLF line terminators","md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-08-13T05:15:45.396904Z","times_seen":249,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/bootstrap.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/bootstrap.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23423\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (566), with CRLF line terminators","md5":"1a811fd7a5e52578985135b39a1664f8","sha1":"81989657aa78b1470ba4cc82761c36f0f6db139c","sha256":"b91adb9cc84595f9b4e46f6cdc2674b40199b9d6cbb81e7685a36fd59d962b36","sha512":"169656155090225470dcbb3503d7123d81851e3a7c611a851f902ddb567ef0ff990ef3b0ac631bb2ca8534b271026460d78647835f282d72f84afdc52722fb2d","ssdeep":"1536:BQLz5JZGAN8eO9tgTrocYU7R8cMdd3jN0oE5aQFCHiv00EOR3rXP1bJG3xKJBIr1:mwE8ezn8G6uLawupgBregZrE","tlshash":"1724551ae95121065973cb7c53e17765ffba0167ca0186aa7ede73008ff97d08922e8c","first_seen":"2025-04-16T16:49:09.303518Z","last_seen":"2026-08-13T05:15:45.401293Z","times_seen":181,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/style.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/style.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Apr 2025 20:18:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14814\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90686,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"2a1833b9f321d09afba894d74f8a3f94","sha1":"9494b28caee483bbd06ce287b33fe4ee1a8124fb","sha256":"87fcf74c81e2b8e4d9c0467d52eda034e2eeb20acf9c407b2d8120ca28c38c3a","sha512":"9d25f88396614b6c764a6c5e8bd7c96264ac2295cf233c388ba9c3e069936f91fcab721c88fd68e602d7f0a6249e1a572f4039080256e1dfe70b77fc80281903","ssdeep":"1536:eSvXDBVAlXZlXUzp/8bTWKeLlXTsp4Awhsr2hOAV:lvDBVJJ9l","tlshash":"c89356ac960211466237dfb46be54318fb784023ca1705acbbcda2414ff677c86a6f9d","first_seen":"2025-08-08T07:03:10.513733Z","last_seen":"2026-03-24T01:21:18.908385Z","times_seen":10,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8200\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33461,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with CRLF line terminators","md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-08-13T05:15:45.409769Z","times_seen":301,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.countdown.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.countdown.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2479\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7397,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (459), with CRLF line terminators","md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-08-13T05:15:45.381408Z","times_seen":191,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/d5f1cbedfa80551c4ad4acc14c31330a66d6d9dc.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"52.28.41.203","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 01 Jan 2025 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:C6:B6:6C:12:F6:01:2B:C5:12:CD:14:1F:5F:98:93:35:23:E6:72","sha256":"62:89:5E:08:77:16:42:58:9D:77:1F:38:8C:73:AA:58:D5:ED:1F:1A:79:6A:FB:C6:2A:FF:C5:C1:C9:87:AE:AE"}}},"request":{"raw":"GET /widget/d5f1cbedfa80551c4ad4acc14c31330a66d6d9dc.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://trustfundscapital.xyz.nicoil.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-08-14T05:15:34.871171Z","times_seen":3758,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":120,"dns":56,"connect":21,"send":0,"wait":24,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/storage/app/public/photos/KfkvQQfXSWHwjBvxHLeDYklQNq6tOK26vK06SqGu.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /storage/app/public/photos/KfkvQQfXSWHwjBvxHLeDYklQNq6tOK26vK06SqGu.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 21 Apr 2025 06:14:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58932\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 124, 8-bit/color RGBA, non-interlaced","md5":"500058cdf14c809794df133955bc8b28","sha1":"84ed640ad0a8d9ec71264534fe589a9fae20f37e","sha256":"039ef8b04d84b2a60cce7ddabd9429d9adc912ee7e0609f4b4ad1e81e9bf6c6e","sha512":"61626c80c5a7c943440c1e29bac04bd07f095b2083ac965fbc6e858a7eeb2f4da13617b83167083b418b270f6da9499d643a50b8f01c152c6c39c7e77beb9268","ssdeep":"1536:4Hh9LfqHcLJVUX+kbLvg977sTZXwjN5JNI03FzC9AQ:4HDpQtg977sXwRbNI03FzCiQ","tlshash":"fc4302d1bfc814ddf1fae8b758a0cf36e96a9b8685f2c850201d061a6d3727524b3336","first_seen":"2025-08-08T07:19:44.399084Z","last_seen":"2025-09-17T09:17:06.024225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/bootstrap.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/bootstrap.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17027\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95320,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (513), with CRLF line terminators","md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-08-13T05:15:45.380182Z","times_seen":195,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-02.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-02.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8237\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"ff8a7e046de6fb8214ea806877d5fa20","sha1":"9a535c90610e914d9b9e03bb0100a3baf73d11d6","sha256":"3c5ab3b5541dd343303fa3325a3ace75cad5ca9434153a3fe4a2d364190a6f1f","sha512":"f4edb52484ddc481afe097658ee5a5c9a7c2edf75b0c7fbb539622d00ece16ee6b29a1fdd87dd405e82a8c2d281ec4d58cdc45c46b2f0bf2b786eda955f933b8","ssdeep":"192:wlHKsRiuMNz2ZeiwF4bHAZuYw3OFAhmz12th:wnRil28j4bAZuYw3nhmx6","tlshash":"74029d4dfd4049036b00c37d06c6d72b69d388d8dbe7a672a7c38459d7902bda0463d6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.387031Z","times_seen":242,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 30 Aug 2026 03:39:41 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1575397\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSKun5ZQaJPn%2Bke%2FVMnKSs0mcONIislL5KdSMj0C4mwcGMUb6qBg%2FSgSWCIUzPca3yyMKZDgRGaBtegHFkn7DKVmwJ6qa6PsLqiLFWw%3D\"}]}\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9807810a0a33b4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-09T02:43:09.725737Z","times_seen":2971,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":96,"dns":24,"connect":1,"send":0,"wait":9,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 04 Dec 2024 00:00:00 GMT","end":"Sun, 28 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5E:7A:A9:36:B1:77:7D:E9:4A:88:DF:57:72:66:9B:49:8C:C2:1B:7B","sha256":"5B:82:B2:0D:AE:78:68:58:AD:62:AD:72:F0:D2:53:96:BC:77:BA:01:A6:44:FE:40:68:2B:94:C4:F0:C0:C0:C3"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68c9a4d3-46dd\"\r\nexpires: Wed, 17 Sep 2025 09:20:45 GMT\r\nlast-modified: Tue, 16 Sep 2025 17:56:35 GMT\r\nx-77-nzt: EwwBuUwJCgH3IQAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420552023e6627cca68e7e2c533\r\nx-77-cache: HIT\r\nx-77-age: 33\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":50,"dns":55,"connect":7,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/static/base/img/slider-img-3.html","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/static/base/img/slider-img-3.html HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-13T16:03:14.375447Z","times_seen":41478,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-17T09:16:17.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; expires=Tue, 09-Dec-2025 17:16:18 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nremedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D; expires=Tue, 09-Dec-2025 17:16:18 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 11521\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":66594,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (419)","md5":"d734e17f733539145046c8661b711515","sha1":"f1e6cea6abca3984915ca7d172f349265f0ac993","sha256":"e6c9aab398e8929e1c74fbebc8b356c3504815f6d321aecedde42010f5b8ee7c","sha512":"a465bb8c16ea304d31b2b2d6412c4ab184e104024d9d4b3c833b33a3299ed11ff457229feffd30a02fbef0e89c5b1f3b1cd60c023c6187db06b5582523173e8f","ssdeep":"768:rJZ5b5kUOOOOMt9BbcbsblbWUOu3bznYTnK6Jj/kr/F1UCPmP:rj5b5kUOOOOooUOGOnKq/kLTUCy","tlshash":"66534121a4f5123b01a3c0e26aa5ab1bafe9d00bda1f461876fc0bd81fd3c86dd5755c","first_seen":"2025-09-17T09:17:06.032872Z","last_seen":"2025-09-17T09:17:06.032872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":474,"dns":252,"connect":107,"send":0,"wait":297,"receive":1,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35790\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152478,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526), with CRLF line terminators","md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-08-13T05:15:45.405787Z","times_seen":257,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/img/innovate.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/img/innovate.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/customstyle.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Apr 2025 19:51:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45116\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 662x463, components 3","md5":"c0ce17e631e1acc0becc8e8e3dd85821","sha1":"407243320d6a57d04be9b24021b23525c30c7d22","sha256":"8db6d46d1f89caad6aaf2d67488fde7f29ca41d6bc620ee5704b8829535a9c22","sha512":"d900f0c27aef639fc2bc5d18c173e5b64451f6361c326e92555b1871e709200e5a254f3d8dae46527f545bb568d2b65e2e72120e49058006f774c8577ffff474","ssdeep":"768:kKt0Lp2h221HTAiXr4LO8juov0qlvNqyC8qeN+5SKCFA7Vp5VDivRDUJAW:kV0821Hl8jXcCvNpC8TU5ZZpTDSDUeW","tlshash":"2e13e0274b808605e5e7edf401c5126fc18946f4edc32b07b9b406a61699187e4bdbee","first_seen":"2025-08-08T07:01:42.192313Z","last_seen":"2026-03-24T01:21:18.885586Z","times_seen":11,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.273Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/jquery.easing.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.easing.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 863\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4137,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-08-13T05:15:45.402434Z","times_seen":185,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/animate.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/animate.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4370\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83528,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e45ee68bfae20a52bb319e40c1b04d2","sha1":"7391a7bb4ef5a2cad2a4033a7b0af054955233cf","sha256":"1b57004d81d1c2c765ef74b9dd93a75de620cc1c6d4a9cc1c8ebbf2877721dc9","sha512":"922a48837620532fffba1107a3c7618bd559e8709e4ae9fb529b6d4fe85f3d24a6c3d5542501176fd7b420b4f0a04d9e6c093873360a1330a000ae22bf306d58","ssdeep":"768:i1k1R4W4J1I184Y4w4o4+VkVK4q4z/3K3F7o7T9:74W4t4Y4w4o4Y4q4z/3K3F7o7T9","tlshash":"6f83d86e2840114447330b76d3de4e68ea3da57318222dea73de598b8f76f6853c9e07","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.393658Z","times_seen":250,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/responsive.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/responsive.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 698\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccf04542457e883d3bdbc2d98bf8fdbe","sha1":"8f5a67d5e52dde1e135ca1b781bb6c7d922cb251","sha256":"e7ed8dbc96e395c823b8a607158db76a236253ea8227ab5885646b62d17e41da","sha512":"59dc7870e4f6048f6e5bb0acfe877a2bc4bd142e92c84c8b57337840d4dd71fcb8cf59e3d766e464e020a125adc581017a353ec991b40350c6aa04361340aabd","ssdeep":"","tlshash":"fe71d94f2a4210094577737ae3a7a155fe2648b3d38ae1f1bd9c2210cf785994522f8d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.382513Z","times_seen":242,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-06.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-06.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18102\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7620d1c169784f5c388bcd5df851e9c8","sha1":"8e4bc8160bd68d03b6b9f36dfa8aed0173ba6137","sha256":"f8dc6379062e3b9328a95a988b3b7109e267e22f47a6e52d63f971b7d025f3a4","sha512":"88ef144ffd75fca4a9d7ef1f06b24c903c07b939d7bc0360e27c511328b752372a5db0bee91553d6984f5a4874452816374c14ace81d4a9d3d2c50a38688c268","ssdeep":"384:jFf2VId+0frhaHXEjpDUJ3lEZ8iEXBcuugFp5mdkCLZ6A7tMWC:Rf2VId+UCEjhUP8EXBccr5mdkC3Jy","tlshash":"d582c0ad7339821e8355fbc1157b20eeaa5cdf86cb1a5084e9e7dbf26c02395408d187","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.399622Z","times_seen":244,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/scripts.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/scripts.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3341\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15476,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.392048Z","times_seen":246,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 24 Sep 2025 09:16:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40485\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78584,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-08-13T05:15:45.400765Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/owl.carousel.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/owl.carousel.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1019\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9843ea449af1cd03ec3e44c854f42347","sha1":"4c0c46eedbb43465f866878d4081a3ca5f9e060a","sha256":"8a53e08937c56d0ca2c80ce4dd719cac4393f8f28aed062116850b1e26a08ee6","sha512":"e421174abce281cef8f4db552a7c1750d5f773035d99191ab8f75dd50ae00664098c07f849759a7ee8c78b79cd5ba33cf1625bc5c493738e5e57c4de882518eb","ssdeep":"96:3QgSZ+nXSV+8QmmcJeXhrUTJh39DyAAFdh0g0FarLvV7Kmiyb:QZ+nXQQzd2l/yP73vgnyb","tlshash":"949159e42226114f593b87a01bed8a56f87d84638c061104b6eb470a4ffea68911ff6e","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.394134Z","times_seen":237,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 422\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/jquery.mb.YTPlayer.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/jquery.mb.YTPlayer.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5097\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048)","md5":"901273a083005ed8f05f19c235e1618e","sha1":"1c679b75452eb6fcd43e6d5a7c2bf5c1312529f3","sha256":"89122a24b64349cf4d1ae941cd23ca2a06460b807b732c3b2884869139fbcc25","sha512":"69470175bc1d4db318a8b96fcd215b73a3088d29f533484b82dfadcc14af85c034c8192b0ec8a1fc071a9d7cf0abe907dc3df453a4715a36ecbde4cb22717ea6","ssdeep":"192:y23C2pkgW7wRjcXpiOHdFqeVVVwJO7W8NUFbL0t2gvMgDY:z3CLH3FLqFHv","tlshash":"9022f9357eeb2b41651bc65827ba1bec2f181013124bccedbb957348cf5d69e48a0f88","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.403551Z","times_seen":225,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/avatars/4.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/4.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25747\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 262x300, components 3","md5":"dad1660a7b0d6cd05bb526df63add1fb","sha1":"2916407e1a053f877fdd409170e9162aee64c16c","sha256":"8e812b62a5008bd1e3f8353e623ba11cda37e8700597f8254da456ca8fea681c","sha512":"694ebcfbadb7fa52af36186a000fdb228d6c75fba01b42fd6f12e3540d915d14ece4de3b8ad778e1105beba0e0bb162a068bc0eec01360dbd955aed962a46420","ssdeep":"768:WEcob5jvRkbd1pJ4Jx7NXUAR/YLFJBD2R/U:WEb5jQmrO2Rc","tlshash":"f6c2e03db6c10ce8f8217374569f3c9a31d3aa5465112896e8e6f67b30502f28f14ee6","first_seen":"2025-04-27T11:22:47.44423Z","last_seen":"2026-08-13T05:15:45.392536Z","times_seen":186,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/js/all.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/js/all.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428396\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1195004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65346), with CRLF line terminators","md5":"56fbbd387be498196d980e0213ecbf2f","sha1":"60698c43302313ce9681de3cdfe11b4e6c8e20e8","sha256":"38744741f55e4aa0ce2c92600c51a5a15d12e6f96bfe50a136a7a286f020ec8d","sha512":"658afff9cb3a78cde5fc1484a132c41857bf08b4c1177e031f1f2d736a47a96c96c05d53a7444b4967864c5d319d6072e4d527562443eba0c84349575e6a9823","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8x:MD5cEJhswtRww3O3lv","tlshash":"6525c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-08-03T01:22:52.614063Z","last_seen":"2026-08-13T05:15:45.383005Z","times_seen":172,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/magnific-popup.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/magnific-popup.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1688\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2aad777437b42bb818d737c73156ddb7","sha1":"6127d39b81eacab77cd834258e8f34747a793056","sha256":"44c0bc765e9c74b5e70366863a39b5db34f121c37b0b9e45ad2244c672820584","sha512":"f6eb432e3ee2ad220eb295f62c053090d8778e9fb74254e49aae248253d96bf3af18ebcafd1bda560a1e46ecf9d0c9d703ebad2debf2d2c5a2fbfc9b92eee0e2","ssdeep":"192:S+mS4tKnIQA5H2CqAEgmLioElcXC6Tikpc/gQMAGxW:dWROCz","tlshash":"7ff1fe59db112342c237dbb4dbe30719e71200639b0300abbfcd9a46affa5684661fd9","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.401878Z","times_seen":245,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/all.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/all.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12356\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"05cb650082a3fc8aa618cb48208a79ca","sha1":"cc160cd30be0f9f99541a4763a6ce7d8cd001fa3","sha256":"dee2a403938d53a47b4ea62b38c5581aff1f943b85147fc7aad5f9e53d256fa9","sha512":"b7a3124ad5ccefeb9050f8c8de6f1dd37bf758214c413cea8871d32fee16ca5009c1aa2ee945bfabf6763f9b1cf51818a9ce7657fa0dad2fcfade6d53c9a26f7","ssdeep":"1536:299xhathLHFLwXhrjU2AWFS1L0pgUrtfmz:C9xhathLHFLwXhrjU2AWFqL0WUrRmz","tlshash":"1173167cd95f10924322dae197436242fb25763efe410c4cf2a1e78d9be1226a586fcd","first_seen":"2025-04-16T16:49:09.286329Z","last_seen":"2026-08-13T05:15:45.407335Z","times_seen":173,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/avatars/3.jpg","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/3.jpg HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44093\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 262x300, components 3","md5":"f9803c06337122374cf63d87de873957","sha1":"7d7520c14d3ad58e331f683232edb7e16ae0f80b","sha256":"0bc9bc7c82c1f4ee2066781ecf80c48fd8b1ccaaf50101170e0e607108a01800","sha512":"ecd28e3c419e1d05a4ad0635586e2319b2a4d21fd180769c06be15546db4f05ae5cb393504e2a6d316975917899e857a6e98605b70b39e136f60847f770942ce","ssdeep":"768:ZD24WP7LftOvCDuRl2vF/Ta4LVGf0+nljGIEGKvud0p9tuNF2q1zoW+1DpILZdl:Z4P7ZOqK/2vVTnGMMljGpG8uaUzmZwZf","tlshash":"7b13021cb59a1c60cb588841566bd4bb74bae9eb6c0fe89d0e0843ae7164cd439ccf39","first_seen":"2025-04-27T11:22:47.443312Z","last_seen":"2026-08-13T05:15:45.389592Z","times_seen":175,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-03.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-03.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14568\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"8a8f38079225ce11ba10b8eae50775ab","sha1":"a2c13028e4e9e3c09af2ffba6d13186305590aee","sha256":"463110f47af141b30ef89a82da810081694ae34b40f6b9fcea044a8d90e85174","sha512":"b7d5717a876972373e1002a9bd5251b7301bcc27f1a99fa8dfbd27b7258ac76619222b53d4407bd775c975cafdbd968c5b4e54d0d9d7dfc90e1a474ed1883697","ssdeep":"384:3VbtTwSIEeChYgAmVRLV1ObcdQO+oYqCiZsUkS:3zTVeCCglVRLV1ObcdHyqCuNP","tlshash":"f262c0fbd42204815af5c1bd14e3da5fb9333a8893e732d030a7b55c1ed961402a9baa","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.411321Z","times_seen":248,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/webfonts/fa-solid-900.woff2","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 24 Sep 2025 09:16:19 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74348\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-08-14T19:45:49.422272Z","times_seen":5721,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-04.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-04.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14865\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"437071d3ca37bbb3f3d4814e6ef6029b","sha1":"480780d285aef220034f29cf7b4d0fd1bf28e197","sha256":"699521a2c3be4cc036eef7f6990221bd6555dfcae9274a5979a9b78eda7a8627","sha512":"74ce29b27a5462cc1f602dfa41f00ab327166d807b2ce462402f3289cb082a7b6949b5fca94080e990ddc41893c6e601a8ffcb4ae544ad8fb99b291154ce9e3a","ssdeep":"384:6ERMJn+M2l9hbK+QFgZb5K4+9+zzzuHBLtVvBZ6XuZ05qtnHdG:6Eic3h1Qcb5L+9SEBLtlBfZ05UnHI","tlshash":"5262d0bacd5e4efed485f1442b205627d27a5cb37560fabc4ca6d85f04734b6c0427a1","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.395068Z","times_seen":247,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 24 Sep 2025 09:16:19 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74,"size_decoded":0,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"0935d506ad5d03bb060a5ef62605775a","sha1":"80c6896910d1ddd9f5271f389958496b1994c1b5","sha256":"2f61affc60d3b130f492a2a8d125ed73d167af85cd669ee9d4d8c5c7d407828c","sha512":"794c8986cac3ee42a5cbe4e56288df09eb5e0adf68ce29de0acda563a59f357b2ff6a4da3a8c54b5d7ba7edb330a59712f277453bfcc38a22fe5f840ef78f00d","ssdeep":"","tlshash":"67a022fe832300000f2200e30202300ace0302f820c00bc08ca003afa8e0b03302a30c","first_seen":"2024-09-11T20:09:12Z","last_seen":"2026-08-13T05:15:45.395584Z","times_seen":222,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 422\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 422\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/css/owl.theme.default.min.css","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/css/owl.theme.default.min.css HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 17 Oct 2025 09:16:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 413\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef9c02a9d33951f1ac6f547bfefdb72f","sha1":"53a61837620bdfebeab0325689e58c5d37b5d3a5","sha256":"b64ffcd5f35a7e4dfef1fede979637b6901018699c5e36b5c7ff88a2f472ab1f","sha512":"3a714d7084ddc37e4581571cdd75e8fc26e721d7ec7ece79b6f149b9745599a3c36b8668f4a55c6e5f0250ce63fc503f83ca10010081d63d086ae74fe76f4c71","ssdeep":"","tlshash":"7221abc4f216210f743386e01b688247fb5e243b0a4d09e8f5da9114cf7c904aa6ef6c","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-08-13T05:15:45.389078Z","times_seen":277,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-05.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-05.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13819\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"32b96d9461314a2b8a2a13b5ff2c4002","sha1":"7865e35459f48d3464fa6c7a5d6714f9049ef3ad","sha256":"039efeeffa143c48f38e94d15640321eedfac7d7308392a67c8873d5afc839bc","sha512":"40a13571ab0ed900d169f9c106346ec77936ee413b5f8f4ea17319e97fb0b1536f9b11096bd99c341103f07f2e1e032bcdf4979f2793bd98ffc9b4531f7e97c4","ssdeep":"384:pcwF2IfxHWgOUh0/iLRuTC4KkPpY7vz3I8A696Y5I:pcwxHWgOglRuTC4Kkm/nAa6Y5I","tlshash":"8252bf0e9115d54d2a0fe58225fa9387e6ed0d80d09b108bddc3d4de76361867e10b9f","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.411999Z","times_seen":247,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/temp/custom/base/img/clients-logo-08.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-08.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14038\r\ndate: Wed, 17 Sep 2025 09:16:18 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7d917afc12aa287c0e2d9dab0e0ef9ff","sha1":"bb76c571f887250487592a977a13ec2fa6ce8ae3","sha256":"bcd5bcb3fcdb29f85d0bb0435ced0cf4e4e1789e7c701663a1cfa626895eab79","sha512":"a96f73c9a4d6a7ba28c8f6eb1bc6f5fb9b4a75ec5f47d32c597b62f75f82ef0f42237af6b8bd12fafdee3bb394959ec5e276f5163705d53408546fee54a68fcd","ssdeep":"384:3HJdaqhRn7xglRDLF+nvlQgSB0E4mSEJgEOo:3p/FmR6tQ5yE4S/Oo","tlshash":"6252cf09289e2e101158ba475f5bd220185b0dbccd937d7c79dc91a6d3f8ef2a09c8f6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-08-13T05:15:45.402884Z","times_seen":246,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.789Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-17","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:18.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 422\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /flags/32/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=830\r\netag: \"63692750-33e\"\r\nexpires: Fri, 03 Jul 2026 04:34:13 GMT\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\ncf-cache-status: HIT\r\nage: 6583326\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtWUfw3s8N4gCwaY4sEHz4TQZhG4NYtlWMR40jwNHBb90Jj5FNLeoP%2FoXj9OUMndPm8kw3XNHd3WkN8iXNY2AxDcjJWKSt3qAX%2FRyng%3D\"}]}\r\ncf-ray: 9807810eae5db4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c7d024de9ea604d5112aafc2738f21f","sha1":"19eae4ef8a7275c8cd5a6528e9c302c36feb8ac4","sha256":"529bcccc5a1659f26fe9f396a809996d064504598f145bee5abc62b94f7d1ec6","sha512":"1f2d1c7015d2b000f5b271ead4e16c3f36f049a34991d7032ee3b353ad7b1297bedcb4c75af662aa15d4b86a2f8187557d701abbdc7b32133ae1f23b9042af7f","ssdeep":"","tlshash":"670144c70d10215ccc2bcc5251eb044584a36a6a453b41ff0f2e980c56f595f5cd0305","first_seen":"2024-05-01T05:40:26Z","last_seen":"2026-08-14T18:23:56.622394Z","times_seen":1875,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustfundscapital.xyz.nicoil.xyz/storage/app/public/photos/fSqCHDvN4JcE8jNLzgqZfzQIdMMtfTwgTQANaCUh.png","fqdn":"trustfundscapital.xyz.nicoil.xyz","domain":"nicoil.xyz","tld":"xyz"},"ip":{"addr":"192.3.190.186","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustfundscapital.xyz.nicoil.xyz/","date":"2025-09-17T09:16:19.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.trustfundscapital.xyz.nicoil.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 05:52:14 GMT","end":"Thu, 23 Oct 2025 05:52:13 GMT"},"fingerprint":{"sha1":"FE:8A:BD:DE:5C:09:C3:53:65:32:86:89:71:B5:33:F3:87:B7:32:F7","sha256":"E2:1A:5A:19:10:6B:C0:F4:64:70:B5:DE:6F:A6:4E:82:3B:7D:52:30:2F:9B:DA:B8:18:CA:0A:3B:A0:36:81:FC"}}},"request":{"raw":"GET /storage/app/public/photos/fSqCHDvN4JcE8jNLzgqZfzQIdMMtfTwgTQANaCUh.png HTTP/1.1\r\nHost: trustfundscapital.xyz.nicoil.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trustfundscapital.xyz.nicoil.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRGZUdiSGltU2VTSWZheUFlUnI3VWc9PSIsInZhbHVlIjoiZVFXNDRWR25PaUtFL0RESVVJYWUvV2ZpZ3RudFFyckltSG45YldXVlJUNytBWExyL09WVWVMMU1idlhpdENmQ252WGpCSlZ4R1pRcU0rdksxajdMVGp0WUNoSlNLUjJSTWEwMW8zdVZzcWZWbldnTHE0Uks5Z0o5ODk3MzdJcEsiLCJtYWMiOiJiNWExMDM5NTE1NGMyODE2NWU0MTk3MzI0MDgzZTM4NDc3OGZhYTI0ZTJjY2U2ODE5NzVkNmE0NzY3NTFjMzQ4IiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6IkhCRDF4dEs1ZW5PQ01sTkpLeTBCL1E9PSIsInZhbHVlIjoiRnc2K1hQZ09uYVB5SS9TdHh1RzFUWEJMbmpkZElhTE5XT3hSbFB6R2tERTZSd0lKaUlOUWYvTWtSRGpvb0lFRGV4UnZXZjlTbmNDTStncGVqMVBQNHA2UHZLbGl6ekpIcCs3NFpNSlU3eGFBeVB6UkVnV050eWpuYXFKTmYzZk8iLCJtYWMiOiJkNjU1NmI5OTc0YWQxOGFkZmYxZDNhODhkZTM3Yzg1M2RhY2NlZjQyZjA1YWYxYmM0NTljZjk4YzZmZDhhMjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 17 Sep 2026 09:16:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 21 Apr 2025 06:14:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58932\r\ndate: Wed, 17 Sep 2025 09:16:19 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 124, 8-bit/color RGBA, non-interlaced","md5":"500058cdf14c809794df133955bc8b28","sha1":"84ed640ad0a8d9ec71264534fe589a9fae20f37e","sha256":"039ef8b04d84b2a60cce7ddabd9429d9adc912ee7e0609f4b4ad1e81e9bf6c6e","sha512":"61626c80c5a7c943440c1e29bac04bd07f095b2083ac965fbc6e858a7eeb2f4da13617b83167083b418b270f6da9499d643a50b8f01c152c6c39c7e77beb9268","ssdeep":"1536:4Hh9LfqHcLJVUX+kbLvg977sTZXwjN5JNI03FzC9AQ:4HDpQtg977sXwRbNI03FzCiQ","tlshash":"fc4302d1bfc814ddf1fae8b758a0cf36e96a9b8685f2c850201d061a6d3727524b3336","first_seen":"2025-08-08T07:19:44.399084Z","last_seen":"2025-09-17T09:17:06.024225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}