{"report_id":"080f1555-947c-4ceb-ab0a-1ba2b89cab3f","version":6,"status":"done","tags":[],"date":"2026-01-07T09:16:00Z","url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"104.21.39.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"title":"Wanterflux - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni","dom":{"size":60966,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (770)","md5":"12e3bc0df734b82ec73a3d5ff0e48f0d","sha1":"70be2cc609c9147390c8c6a12a91c9d93de4be58","sha256":"a456730a10ec5891dd3553ec366916c6bc25e3e9bbb93e212d2b744ac96f7a90","sha512":"a3bc811b91880d86f502ea4a708e9efb69ebc2cf169d05ab67dbb47fddc96b3ed84ac0f10cf287f03385b13ebe20ee2ec23e505fd086b498c07792f58d5fa6ea","ssdeep":"768:7ypFQaMZ11YKAGYKA5AW61w5KCD98yD5D:cdO11YKAGYKAKW6S5KCDmU5D","tlshash":"e853a32102e1147b518381c4fba5af6aba94eb47c61bd649b7ac07d11fcbc82dd6331c","dom_hash":"domhash749841d4d47d973602dcd4fc3414593f","first_seen":"2026-01-07T09:16:09.088188Z","last_seen":"2026-01-07T09:16:09.088188Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"104.21.39.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T09:16:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wanterflux-invest.com","ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-09","domain_rank":0,"first_seen":"2026-01-07T09:16:01.682405Z","last_seen":"2026-01-07T09:16:01.682405Z","alert_count":59,"request_count":59,"received_data":2705886,"sent_data":27568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":1,"received_data":260082,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-17T19:30:05.58027Z","times_seen":193295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-17T19:30:05.58027Z","times_seen":193295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-17T19:30:05.58027Z","times_seen":193295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"074213368ac12eba67a8cf5dc670b47a","sha1":"ba1e986ad6eccad975272d9134bbfe3fcfe4b12f","sha256":"53bf8dafac28b94de938df72826e74124331075361e5feef682af2e77b6f93c4","sha512":"0697d62f2480a65c40c057f930653fff4929fd41d603865b9b45c0e6585ecfd6f3abf2526efc60778fc7c243da823d3c4629184319e06c7cfa6faa63c0e12884","ssdeep":"","tlshash":"30112b0404720034c63394eda7cb1e9d753162ab7489a79e3a8ed30c3fc66d6caf52e6","size":1021,"data":"","first_seen":"2025-09-02T04:43:32.350335Z","last_seen":"2026-03-09T06:21:12.150379Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aef91076f883db5d82859841a71c30d1","sha1":"04cea57f4e97521601e4e011bfe183d0507496d2","sha256":"2a7c96529e64ab018efbe5e2b3a126191816b62767db1bf346e20a2df17697d2","sha512":"d36f4f651b5db41f2041ec8e821c495dae80edaa970298859f52f089b6c21b2fcde6e7e8c9b125cac279bfc44c8b78fb5be2c7f83865fa16147a08948aa65050","ssdeep":"","tlshash":"4021883123361171d2bb606b67cbb3293522a0173501d58c7e0c86884fcad5ef5666d8","size":1381,"data":"","first_seen":"2025-09-02T04:43:32.352172Z","last_seen":"2026-03-09T06:21:12.151256Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-17T04:13:03.778483Z","times_seen":2059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-17T19:30:05.58027Z","times_seen":193295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-17T19:30:05.58027Z","times_seen":193295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/validation/intlTelInput.min.js?v=10","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7317b48cdb35e297b9d4e310fdb883d5","sha1":"f90d459765d89e8cd09deca2d7966212461defae","sha256":"23d6f9bb4164753ea3bce9de27121dcfc685b09a89c59428b35b0c1acbe084d8","sha512":"a96ce4f7d722aa4cfcfaee4531e6716d12677058e416c6c4f168e9f21e1df2533e9762c7c5ee452daddddb56cff2e3e531e0f52c86f55fcfdd9c225f6d877b31","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikdALOpQnRViRssZb:cDiIz8A4knYdYkI+sm","tlshash":"8ff2e9ae7371163766be82fa70e64503aeae34469604443d389c8fcd0b89ed171f6778","size":36476,"data":"","first_seen":"2025-12-05T04:29:08.556791Z","last_seen":"2026-08-16T01:27:42.764439Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wanterflux-invest.com/css/pages.css?v=01","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /css/pages.css?v=01 HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 17:35:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a56-1934\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUZI9K69JV83fbkbVSOd5k8DCtwhRkoKOGoiyPzY1KhfHjy03N6oNrG%2F5jTY234bcJw1sycvaZu9qbpK%2F1n8aec%2BlpS4nrAMSP65aapys7Y4BJqSvg%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fe8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0d403f05dc7a3840d3244cbf2c3bc0d8","sha1":"63e7d60198e29558d74db642cf4cc3a6577ea261","sha256":"a7e895a3463cd3eb523dad6c5745727819bd6adcd9839e4f793c22f94bf85117","sha512":"d0b11de403c089b338bfc5c1e429af3841d6716b0967ce5e63eabeb81fa2fc456dd9649dd8e2aa628f9df3bfde4d5c99ae44595c427bc83a69ed21428f4f5ece","ssdeep":"96:byCddaEOGpH994xXsBOcevcRBr5OMJMzMJxsvB/rlt4xkt4suXOB/0rLaCh4JFC5:F2iHhvRBdOeMwx2NYJ+J4lfZ9D3","tlshash":"bbd1459297b56144783a98a9a6a37f64212c8043d14ecefcbfd6349cffc82d15961f8c","first_seen":"2025-11-04T15:41:57.587103Z","last_seen":"2026-01-24T12:38:40.458114Z","times_seen":24,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-2.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-2.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5726\r\nlast-modified: Wed, 26 Nov 2025 17:35:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a61-165e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaYMDnrLBZ8QNwn3q3HkNjTVfhPjidGffBhj%2BPS0bdQA79muZakOyBv%2BssVcIODMLdao1CWclY6D6IeQJ7qNHkG5zp9%2FXDV0pqzTnCjQcjeOftbDeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0ba800783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8afeb1474b36837c35ee5b897c93b574","sha1":"277ad7a2e3514b2567995fdea9379f6288e7a130","sha256":"403325dfa9d15f89ce62cb56bc00dfaa873dbbc094c0d31868f48b96a59b60fe","sha512":"c869429f49725a2776c7a273ac65825c535f48ccc0c35ebc2f2b13f4a79771a5bf840c7507aa74c4456e863cfaf64acc14808897450465b115baa2f0b051464e","ssdeep":"96:ulMdWkfnanOYw805my+j3OH09aLedsHlUWwzpqm5MD1PkzKqpCfZ:ulMdx5h83y+j35Ce/zpqWMBPkzKGCfZ","tlshash":"dac18ea1f9d5a432f23bf53288a12eb5cadfc25246a7fd086c91ad7219272c033e5458","first_seen":"2025-09-02T04:43:32.243765Z","last_seen":"2026-07-31T11:15:25.996929Z","times_seen":578,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/Inter-Bold.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/Inter-Bold.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 316584\r\nlast-modified: Wed, 26 Nov 2025 17:36:11 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a8b-4d4a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1ANnRIWAXgmVswFdi6e%2FCWSHamNTPvUqi7IvrQGLTRmqcpB5cIG9Wq0%2FbEGuy3emUX720qEIs0x6iz2noS8W6OEe9KmducAjyhhxAVfM4NRH0%2Bitw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d284b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316584,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409","md5":"ba74cc325d5f67d0efbeda51616352db","sha1":"47ff07c75746682133b81e7ac0537ce50a4c9916","sha256":"412c068eab6f36e6807d630ff89127165e8e4d3e8653434cdfb56b60cdcc3a32","sha512":"0e1b968a789e9a4d3149e9bf539f12800b9e808b6d1829841e74a122369110b369b36dd10231fd9fe68523475305e398aad0927fe14247cbe75256cdd17953ad","ssdeep":"6144:x2RouaT1miEEE1ipnQzkghLs7J28i9Bpu:siomE1onQzkgRs7i9Bpu","tlshash":"5b645b13f323c31dca122d3a8b93c7a07367bc512b13e10ab7643a55c99b5b85e9b5c9","first_seen":"2023-10-31T18:47:11Z","last_seen":"2026-08-17T15:06:50.381834Z","times_seen":2786,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/css/styles.css?v=01","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /css/styles.css?v=01 HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 17:35:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a55-c67\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHPKqro4Y2QPVsMVOCmaX2ft0KoIkHuqJANgznkHLYXW9LMH3lIVE0Jfgdcskn%2BffR3YtWrGnZjidAj6ysek3%2B4jxVzT3e8%2B8GEduwC6i207HsgxCA%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fe7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a7bcd1c97a642e3ba1aa56fc190274df","sha1":"00493642cb61f1400562455a55dde50333b4448c","sha256":"8e7f617969f8aa2a4d08878377cd35eb66aa17bd229562cd3a5c86bdb9b6cf90","sha512":"9098c5ce966b5edae9b80710270c641179ba70bcce2256a68b94c0b3630cff6d2d246387e2c83661e5585fb9f76fe646e6c20ade3d59f3faafcd23b57524809b","ssdeep":"","tlshash":"7f61ce53da994846761bc66922cad780339c5841cc07ee75ffd0201cadc87a99ef7b8c","first_seen":"2025-09-02T04:43:32.311331Z","last_seen":"2026-07-31T11:15:25.959426Z","times_seen":584,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/usdt.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/usdt.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a58-df9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMXYs%2BYmBJJUOju4jv9HQQXrugs6Q9t46%2FxbziPQHIxA6E06IYFkPA0UduVgJN4LZCtTihqUEdtTgZlYwjsq0SH0JzsTa%2FoMUSURdb3B8AYFo2LO2w%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fed783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"908ac595c69379ce8ce688a04dc020b5","sha1":"8fea3ba2ba406c0a875388c4dc75481af957a326","sha256":"b7ef94d66bc1b27c90dd4bb1887dfb58335df07576bee8eeee3c459d53fc543c","sha512":"fd52eb012b199609a0edd27ac2d9f118823d76afd5001b1c8373d6c7f96d20696b349e59409dcfc79a638f09292cd75c14a598369681ef0ac4e962b063c69a1d","ssdeep":"","tlshash":"7971e8e96398b2f4e607abe4ca37a871356758f57f12c48cc2847845e21856d0c9adc7","first_seen":"2025-09-02T04:43:32.333256Z","last_seen":"2026-08-07T22:12:32.671056Z","times_seen":1275,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-avatar-1.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-avatar-1.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2216\r\nlast-modified: Wed, 26 Nov 2025 17:35:37 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a69-8a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUZ%2BQxoDkBp6f%2FNFecnT1fUE%2FV%2FSS8tuzt2%2FyRxX%2FlI5OfKxlNkivT%2FdRyW3g0ZGZc46ZT70t3tqavrEgoGERT6NA5Q%2FKrxyzV5xsl3b5Dmv4uUCvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0b9ff0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d90034b2d291e94da6d0c65eb0f9f1a1","sha1":"fb72b31d8799e2e1c9cec12adb3c3e6a17422ef4","sha256":"f24ce3fbcc2eb49afb20cbfd787afd1dd2638481df578f3c2d18a72c73a3238a","sha512":"463b8cb134c6f7edcc23335a444e59f279fd31a61376d8f8677143807c76eca430bd2922da414b348784a1196b87171973d2043a68292c29c135bea5f25b205e","ssdeep":"","tlshash":"5f4129cac327d11ac0ab4e35440d0dc1928c8549ea96076caf4bf92b58ca65d3be23d5","first_seen":"2025-09-02T04:43:32.319544Z","last_seen":"2026-08-07T22:12:32.705919Z","times_seen":833,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/phones.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/phones.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62018\r\nlast-modified: Wed, 26 Nov 2025 17:35:38 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6a-f242\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmjAvWvBMCGFpey6LURwA6vHYyTUVVB7fhCgk9peN41ncv6PCWFD7%2Fvx5LYAiKDNqB2Uz4OwvpiuCrYnp%2F9maWRsELbBouuDR2VbHpxYOANNbnh8GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0baffe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88ae8c6bb589750082b5edf16e6a1cd9","sha1":"8c6bb3702f3271c48d86d65d66a557f4f0f6d898","sha256":"36a7d79051bda66b0503bbf3ddcfc8067ee8cdb063fdcd743493ce6af2b54612","sha512":"28786ec8aa25db88a8381dcc2c7f49eacd969d96395d3a25e7a2bdb08ed114ea472c81c938eeaaea86bc5b58147585287afe581e55ce74894c571e03ecd30a32","ssdeep":"1536:GkkVU4uvILYGW4FoHG3xXQWd8jk7IlJ7avfZk8z+M0:RDvNV8xjdd7IX7avRk7J","tlshash":"67530235dff0ad4d85461130018d2cbca9b87e9dfa1fdd618a710cd0d8b6b2b994b1ae","first_seen":"2025-09-02T04:43:32.240085Z","last_seen":"2026-08-07T22:12:32.633826Z","times_seen":825,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-4.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-4.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4458\r\nlast-modified: Wed, 26 Nov 2025 17:35:23 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a5b-116a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RO0MiDlF%2BD3S4SPs6X1cIsz8JS2hLCxf74Uxcc0BUyCjqC346Nd%2BBIDC2LqKm0XYyqwnaJNePST9gfNXFmKCt%2FbRQO%2F%2Befp9T9MO%2BJC2w%2FSMSzigFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb80e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b6521cc4283ef332bb2691783bb2124","sha1":"f4215511f86aa4e109db5c37661a85944184aef0","sha256":"f78c11fdcaed17dbc72681122cfd87919dc38489442f873c9e425b95036d74ab","sha512":"c6843d77382e21691ed745be283b7a031591921373305e0e20d99492797400e5f4e4a7eb555d3001f4982d538adca2c4b9a6297961a2642a632ce6e89c06f424","ssdeep":"96:KgNOagNgN1ImO7BohzCNmFXJMK+pdOaiSpbXHqOx:GarImO7B7IuKKfXKs","tlshash":"87915cc273c7c0a2b8e98d9853f98679459a7841c2facbae45c2fdba6478974059e804","first_seen":"2025-09-02T04:43:32.330871Z","last_seen":"2026-07-31T11:15:25.990302Z","times_seen":578,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/css/intlTelInput.css","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /css/intlTelInput.css HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 17:35:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a55-5754\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNnHMkxBeq6fmBTH19vxZZEP9S%2FFDZqzwumx1JcFVjCVY0AivRnK5XRMVnnx5BFOb%2FhT9EqniSv%2B3dTc6Mt0K9pKt9gF7ISRtDMbNW0ANe2Hsqx8%2Bw%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fe9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (830)","md5":"2900faf324a372f5aeb5bc2d88682085","sha1":"95e348b62b3dc1a20c50be55b4f7c818d38661c4","sha256":"9a6e0d55d9eda948f4a81d55eb91b987d8c294ca4188e66e5def79b2a46c0174","sha512":"38e42b6112506777bb2930ac17bb904a435ba3630634af71e6045420876cc709b8068259d4bff86cd6491c10690337242b4fe08c410327cbf25dc7d61b41021b","ssdeep":"384:vYsXk1kdCqE9y6mporr8LJj0H12o7UA5LQ2jbc:vP0yQd9yP4oL90B7UA5LQ2jbc","tlshash":"94a2b02346b00d3e961dc1fa38a2c5b5773f0c8a35aecc96eed9504a1d87b90e1ebd54","first_seen":"2025-09-02T04:43:32.270301Z","last_seen":"2026-07-31T11:15:26.024493Z","times_seen":617,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/logo.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:49 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a75-3c7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcrBDNT%2BqULI6b9mfF29Izh5tElnI9z15FFslElJgjuPC8wUMEhCK6PS4JIV9ilGuBzwTsyL%2BTwc0VcwB2eQUgmFi3fQSgJcCNmKymXxt5qaqwlxfQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb176596f021b1c2691f508e1f933b61","sha1":"fa38852591f0366651c4ef73a5d1933b62dc5478","sha256":"c359491b578fb6929a58d33b785a6d4679c555dda092945365a97813292558e4","sha512":"1234af6b2c78c4009051a0f01da71bbc9a144bae061457bc215572ba1ccfde9b5bb83d80b5e516df16c9db676cba2ff706f8294460bcc564ab528ecea2f688a5","ssdeep":"","tlshash":"6f1157c131cc95884e48831b5b0e657b622b30e8a11942c4b9603b0bbdc9bbb1ca9bc9","first_seen":"2025-09-02T04:43:32.306896Z","last_seen":"2026-08-16T15:54:48.230086Z","times_seen":1310,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/binance.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/binance.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a5e-d34\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BLaEN%2B55zTXktStJsDuLwY4bAWZGEMBWC20DARtFfWgUWvvRB4CmS7QutgmcGG7mF4CWco9M9Mwp%2FF%2FPwX5aEYb0DqjMWah4jCM5mvgumTNK15RTw%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fee783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"286147a6a8b43aa9f703eb3b278c669b","sha1":"a23688139388df4ef861c249ccfd8bd48aa2eff2","sha256":"1b4f876a5cc0b5da87f17a7ffb330ce2c5002c414036ddff7803da78ec725865","sha512":"1e4b9065bb362a10ad591f82fe88d373c5c82f582cc5ae6c03c87fe1f0cd3f61b71942fffeb119ed7700ee95e7b91845d16ee94443af3dd9960cd1c0c10fae4a","ssdeep":"","tlshash":"a56193a513a9c2e4b4056bfc8f0a68f23fa728f7ad27c51953d12941e8a067c8c75dd3","first_seen":"2025-09-02T04:43:32.294472Z","last_seen":"2026-08-07T22:12:32.659894Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/quote.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/quote.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a74-ac8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKzYoSxkJ2sfJsBB7sPzNdljO90i22%2BJzAjzJv2lK5Msjk70ueBGHdAOBF4AitLiD35FsLMzILrfsa%2F6S8kFzxW3ZU3tcLJEhTUjTGz%2F%2BK6AxHLHiw%3D%3D\"}]}\r\ncf-ray: 9ba25a0baffa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2760,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"504ce723c76d111e0be511d24721c2dd","sha1":"a1fe51672c966079ca8ccaa11fbe6de0bafa1644","sha256":"a563b73f0268826906bcde897b0a2f55d0d2fa9cfb394e4c151c138f3865202e","sha512":"87a808d4940b03b8e019e3a28be1bc3d866c01323be476d8e2e1ac2d780404bd66046a62855d03ae2c309387f7c18788a5f1d9b3bae538139b5448df459631a2","ssdeep":"","tlshash":"0b513061b3b971e0f215e3f667e27925b95b26622f87c2e4c0d72dd4d87480c5e808c6","first_seen":"2025-09-02T04:43:32.254441Z","last_seen":"2026-08-07T22:12:32.644624Z","times_seen":1212,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/pros-1.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/pros-1.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a65-1510\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXs0DTd9S9NEVmxlbBfpCA7sUPPaLXDLmRpj%2BVuNwgp%2FCydpaf%2Bs7FDBvSfMWpW6q3DoCvj7f0Rxcw6SIP7%2BTygCnqpCIEO7wSpm5VwvThzJqDaCgQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0ba803783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3e03487987db909519573a44bc1c14f","sha1":"e9fe3cb017ee1eeb06730a1b5481c587763e3135","sha256":"7380cdf722492fa999e321b25877905d77eb7781b3729966d36a4a580b40d924","sha512":"052f13a31dd25a9a6e0c561e9dcb24128fe21cc351a1626943534885190a0869790d1038e29b49041649c72cfdade38ed8e1c0043527ae6d56c26dd2d2d32947","ssdeep":"96:oKyaCV0Ct7eFu8TuPK/MeDurIIzfZUijQuGCZ/gNCjAJNk+n3W4ctX7BTDx:oK00dE8OK/4VXGC9yJG+O7BTDx","tlshash":"25b173c8237541a4f949b6fe071bbc542e4649e8e7118c5dcbd46e0be1420ae2d7aecb","first_seen":"2025-09-02T04:43:32.303241Z","last_seen":"2026-08-07T22:12:32.627176Z","times_seen":835,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/info.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/info.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59838\r\nlast-modified: Wed, 26 Nov 2025 17:35:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a67-e9be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMVLtfgGn3R%2BlBci%2BtsZ50ov06TjH7PpgNNbDJZsBx5qM%2BAbQDrAxDsqlZayR%2Fm9xnd7J99r5wlpR5cyB19kIoEEfMc2Yjk%2F5uSVDGe14CcjezoK8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb807783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8955c166ea726f9df674dceb3f9186ad","sha1":"7d642254ba07756830b82c507c49856d91ded48b","sha256":"430789278409c7c3c40c011f36ab5ad7aa9dbb698bf5538b7161b91bee63090b","sha512":"1cc9d6440bcbf856f66eba36f4ba9f2a6a29cf56e340629628061a3cff76ed921adec1fe61e8f513fe4ac37083f4baa450d7e204e939eda5c5fbc27bad0fe015","ssdeep":"1536:I+GXTgppEwC2m78LI1MfqzSS8So+Pd2qoLL0ASZSh1iXmnyqrjR:IhXThtQQuir7dPoLAHZOiXmny8jR","tlshash":"0743023e29de8841c8df2c6d04a8162efa6c9b23668abc7858f6130ed3d5131e7f5d05","first_seen":"2025-09-02T04:43:32.277422Z","last_seen":"2026-08-07T22:12:32.642869Z","times_seen":1183,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-5.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-5.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6344\r\nlast-modified: Wed, 26 Nov 2025 17:35:27 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a5f-18c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjz9bTHzaw8%2FNfRgvpO8h9Mn3T6Hgc9x70erWgww9bl8UItfqrSkbo6qOsoA3wZkPLIC0qtxQQc9rNRn5d5pw38GyHxSkVEjWeAMol4ZccfBNbdnLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb80f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"507dc1da713876f641615339555f7b66","sha1":"a750929cfb3a9b0ab2c28980b7ad3a1a48be619e","sha256":"f03aefcceafe0b9a3173328bb15113bf1b6cade7bf190056278a3f467856d5d1","sha512":"cf7f4d6c92807226563f3aabfec4c1116aa88e892d21a47de479f5839d18b91417cdc41d4cd7d9493b29073d2bdc75039d0f127ee4dca6d086772a19e113426b","ssdeep":"192:sVaVWed6VK1viXfbi2uuUF4G0ivNdpiLwq:asd6RiEUF4Jorp45","tlshash":"09d1bfa4d10c47b3f604a53e669df66246b6dc0177400a300a2b0a67b3b7527b7fe1c8","first_seen":"2025-09-02T04:43:32.323787Z","last_seen":"2026-07-31T11:15:26.005522Z","times_seen":578,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/Inter-Regular.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/Inter-Regular.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 310252\r\nlast-modified: Wed, 26 Nov 2025 17:36:14 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a8e-4bbec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2F%2FVlWsrJiLLTarq4yP%2Bp9enStGGN4QdGQjEcIAn4yBCGTxoCUNc58EW%2FP4VP4DQtHXZUm7QKRvKnh%2FZJ6QGSQdfMY91nLRCLSzT5vzgJtstc6S5jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d0840783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310252,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409","md5":"ea5879884a95551632e9eb1bba5b2128","sha1":"cfa780d0b50b2bb7eacb82984f1b18a95aaa40c5","sha256":"3127f0b873387ee37e2040135a06e9e9c05030f509eb63689529becf28b50384","sha512":"f09113b22bab8fb07920453e2cdc3ce678231f7b9f801f44471461697a10a61a9382173e177691f4170a3f9af736a4ee880fb48cc4408c8eea4e3ee850004cc8","ssdeep":"6144:PUWaT1IUkh6w/yOjngZyKMOMxMmABlNGow+BNn6m4zLkA4X:sX+Qw/rgZyKfMxMmABlNG4BNn6m4/kJX","tlshash":"5f644a17e363c31dc5132e3a8793c7a0b767bc513b12a10abb243a55da9f1b41e9b4d8","first_seen":"2023-10-14T00:46:20Z","last_seen":"2026-08-17T14:28:50.119032Z","times_seen":4453,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/eth.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/eth.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a5c-480\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYrl9yc1SVnmHtjLCPgrGvkDZCdHThmSMVpgniNhtk%2B2%2BB7n2i0DRoidat0xRupqypb92Z2ZkjsLssAPdyOhNy4BT9OfYl8s0KkhKOXrbWWYshY5fQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0baffc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30dd3d2d238cd83055f0f9855f05c381","sha1":"e90b769cad3df8e832f314f95c1e96deebb5f9c2","sha256":"0e0cdeb30eec14f0abd375dac24b6eae25880840a9ece62b3d7c50fa778fbaa8","sha512":"52caac7d6efdda42b7fe943275b0b37983eee7850123df5092c449c767a1c93319152acdae90c1c33f9efc3e07ee60839dd38da9debc79bd967dd9af7fe13b41","ssdeep":"","tlshash":"4e2100d7520c52c01a401ba43b0ff831a756e4e54f8e4cbad648274bb6c8a9f8eb43c5","first_seen":"2025-09-02T04:43:32.286867Z","last_seen":"2026-08-07T22:12:32.642377Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/EncodeSansExpanded-Light.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/EncodeSansExpanded-Light.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 161592\r\nlast-modified: Wed, 26 Nov 2025 17:36:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a93-27738\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymvCQgGN3CWjOdrjKRGl%2FqxUoUconJipoibrPbBcjRKRG4yubKNlUj4qhe7nRbosGOxz1LWXaxrOzWQmjup16Vpv4TOr9G%2BQHacbpaHW00pH286HRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d384d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161592,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"97a2a619bcef5d92ac7f66e17564887c","sha1":"2c6e03389700c030149924e5fdde5f0e9754cced","sha256":"875d0d2122e8bb59c73e1e03d3757b382046266f658df35c0053797e954295bc","sha512":"0b3ae4d454cd5d25800d242177e45719b1b4cd16393586b83d93f94072b026c5a9c3258521a08052f699b59564385d593f07182718e5aa1da9b3a806c69ad051","ssdeep":"3072:ZrdeC8OMvHv5MXeEr2IAEmbYMRbc+LkPjcHHgRlbf:Zrd++XeVgYooHHOx","tlshash":"dff36c0ff7a3db19f5150e35997c83d572e6f8512f22c64ba54cbe68d4870f408c62aa","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-07T22:12:32.700976Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/favicon.png","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=mjask78pbtob5tgd7vln8keh5k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 953\r\nlast-modified: Wed, 26 Nov 2025 17:35:39 GMT\r\npriority: u=6,i=?0\r\netag: \"69273a6b-3b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=octVq6uxwDeqlTISmig0kW5LtOXlIKbeu9fKOjPOklFSYXFFxgNEe%2Fl1TawWPV%2BNGF%2FHC8kyFcWZmHLo8Dpywk%2Bn4fI0K4trm4f90j1xRditYk0%2Bmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0f08d8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced","md5":"a2f7ca10e3c4dfd860c8b9f43e9b210e","sha1":"31eb72c55b2a89269d502dddbd5492c83cc2d4e4","sha256":"d7eff8631da5eb23321129952d2774c1c19ce0ea04b41e29b5227386602befc0","sha512":"66fe4e36b00bcec3a96c1ea53f22a19865e8f748672c9473d5de32c531c1734c537a052c24fce2c4a91e984b9f20aa997859d307c88a46601db8489d8d3eea14","ssdeep":"","tlshash":"6911c498bb91707cdfefe10665ab29012ba1623d0ca23c0ebc747321102687cf738302","first_seen":"2025-09-02T04:43:32.309865Z","last_seen":"2026-07-31T11:15:26.008583Z","times_seen":638,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-3.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-3.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4698\r\nlast-modified: Wed, 26 Nov 2025 17:35:38 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6a-125a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVFWmJl8AdyIgG5Wue1eS%2BSu96makwS4r0IoEMZljsdvSr8n5ziXcBk4yMV4P7OBC0970%2F51c%2FxV27traTofehGDRsjKHrUnpEiZckGsr9VpHxymiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0ba802783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37f782baa272833a186e89db0e6a8cb6","sha1":"11df9ab035e5cf57d5424edcf3012e40a505b7c6","sha256":"aa1ec252f76f96fd96b2cbbefff750c0e5838096310cae74ebe2edac44b6aa4c","sha512":"10bb562eb4abed5f1d2f3a2e5aa4220a6ef16073bf4e9e4cdd6c86e710aed586714127c7b603cb6f3a8578f936f27b0045090b390fb9718f0ac1cfd3856cf6c1","ssdeep":"96:nQFaJQVmHaGRSDnHO2KqK2DNXT1LgKMSxHh:nuD3LO2Kv2DN5LYSZh","tlshash":"00a18daf78c9f476f8aac13e923bd1e4ec1a491b4b4c6d55ad1436fcc0e244a8485788","first_seen":"2025-09-02T04:43:32.246752Z","last_seen":"2026-07-31T11:15:25.963559Z","times_seen":578,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/polonex.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/polonex.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:51 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a77-3fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwddxyVf7BM%2FIX4fM7RVix4m9eco40bdwkYuHSyoSUm9mG8cLA%2FTME6RAypmnVtUv%2FlagQ889Ol6vksKIK7T%2B9Ipm6lGTeIWYaKkJOyCw%2BjNYjSNqA%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb80a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a93f41c5d779ef0d290e4c54e2438c4","sha1":"e56f962012e24d19748c1d4f34789fab11deb64e","sha256":"c9bb6c3d073015bd7e82cb3c8e1b1e9a3fa9e15d3ade934e21068ecd59424f61","sha512":"ecc25a27648b40e5fb0370597111f401bfec58bb6b74145251062ab6ed8a6a5c9d6e15a5e3fa23687429262adaa83007366839604b4c43b8922dc7c84fa61e6f","ssdeep":"","tlshash":"ed11cefc6728920d4e0897943b6aa866107273d89189c747b5c565af6a8d06f0cba1d4","first_seen":"2025-09-02T04:43:32.322472Z","last_seen":"2026-08-07T22:12:32.628582Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/bittrex.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/bittrex.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:52 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a78-328\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yc6PwepvH4Goc8slqqQa87%2Bc0932SoBWk%2F8aDrfe335NCUBzEzcE12Ml9c0jYfi8cHPs52u2qnBQWeNwJjFDOhIfecQsqK8rcNvG6eUa0RIEIyf5FA%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb80b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df280930bc74ed9797630ef8fc49d3ae","sha1":"90880c4fea185cf1c65916a7f2c946e030170499","sha256":"bd78df4c565f16b918144f647ff9bb0dd258d448fc1c27079e93a0a7a073c994","sha512":"9b85a6a0ed231f251557790380bb6b203ce6b66e55a7bcca005404183c9a9882fb38637ee2b48c8742af5c9875f0f195beffe909ae992476e26f8058171569b9","ssdeep":"","tlshash":"4601f1f4f62c924d0e08534d2b7835395194b3d8c3c64b5d3940633b6c8d4271eb32e8","first_seen":"2025-09-02T04:43:32.308504Z","last_seen":"2026-08-07T22:12:32.637829Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/Inter-SemiBold.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/Inter-SemiBold.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 316220\r\nlast-modified: Wed, 26 Nov 2025 17:36:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a96-4d33c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0lbtZ7OnSpHRaKVJykLwtRWnceXl9M2ip99IraX7xQYuixt6EgjJO6qJGtgPJ5Mtp3iwzrg50D9XeX9lG43UtkAeD5oAlWPbw38jvwiMEGHEnyOUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d083f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316220,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 52 names, Microsoft, language 0x409","md5":"465266b2b986e33ef7e395f4df87b300","sha1":"5e0c44e57e7e090252d79f622899e67585bb892c","sha256":"b0b540e69bf6717016e33874670e09acf4bffc2ca3f4c1cf174a4ff696308c65","sha512":"b653746094471135e0b4cb286b45c4fe2b146a877ed3ad03bf1c116f0413c0c2e66d9245651349dcf1c322b71071b499b83129d88a17b25f3ca7b18d5a5428b6","ssdeep":"3072:tYR7HDJwbA5Maf/j41tIW+8EziE7/VgC+zvVF7ALp5p28gzEPuNOVKpxG6IXfsCQ:qR6aT19iEjAa5hgJRLQCo4TJIwH7","tlshash":"0d646a07f363831dc9062d3a47e3c7a07367bc917a12e10abb283799c98b5b45d9b5c9","first_seen":"2023-10-14T00:46:20Z","last_seen":"2026-08-17T14:28:50.144789Z","times_seen":3204,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/comment.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/comment.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/tailwind.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a73-93c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eD35IYUdQOsoAC3T5gn53iDtdmWiv2dNCOsY3anXKHhSfUddZ1bVAB%2BdXRw4hkxCS%2FuFmu63uHCfUZ7ofwWIXPC5TgLt%2BhlefV7yu8MjukU4UdtgFw%3D%3D\"}]}\r\ncf-ray: 9ba25a0d1849783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03dafba01023fde082ffa08cec31dfd6","sha1":"bd202e2efecf4fcccbdea6ed2beb3c1d246a8e98","sha256":"0d1664b6b5351ca740502fc40a1fac93071f77f3dc3e3ba1acc32c696757fbad","sha512":"6da0a2071f09b1dd1462f9737d29271b241ea9dc471c072a2de131a1be356110286b1a72c3e4649f560003783538463a08c16c8b19164d74cf34f0e1b25dc302","ssdeep":"","tlshash":"1941eef0e25c90e95405bb78ce7b17e173733dad2ad0c2849370f9266a949fa9c5c983","first_seen":"2025-09-02T04:43:32.337995Z","last_seen":"2026-08-07T22:12:32.636289Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-1.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-1.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4738\r\nlast-modified: Wed, 26 Nov 2025 17:35:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6e-1282\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKdvqw8D8SAKCfMsx60Yja%2Futp9Sd3usiyHUzj7%2BL2xXCAQsWULaBPWagPA7DDdC4A8fi1Ke9t12NtB8mWjgmFwUVJTUc6kmWEpmc3cQfHOtNw4%2BUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bafff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48927f92646cf9a8686dda3205481e23","sha1":"82690896bea6554784e2c5b96b2d9e786d9e026e","sha256":"ab6494a89374282c3ccf71f698a449fb3ee1417c78731a67cbb281851d229dde","sha512":"fa59164b9d52cd5e2e20be35bbc8277f3e13eb69aaca62a74a3234f231df1906814b49fe952ca8fdceed4ac3aff0f8e41cb4a80d78ff61913ba234db5f3e26d7","ssdeep":"96:TR50CIHUayLuMBFdknzua1x0dpKOS5/V/rqKf6cUsc/NcVW6Ai+IQyb:zVIH7gFGZz4pw/V/V5Uso1di+c","tlshash":"caa18e2b9ec08a57f46f21af9e4a5b398248cc4011547ec18c755ff9e6713cc9718e27","first_seen":"2025-09-02T04:43:32.296543Z","last_seen":"2026-07-31T11:15:26.011627Z","times_seen":578,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/pros-3.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/pros-3.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a62-6d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DVy9aSZoMJ5xo3R5vLRlhvyvtJYELRjkU7SkLGnddva7uN9f33ggKpFajAWEoi2Jjwz1Ws7c5emG0Hl3y70r%2Fy1XFL1w3scdPBTu7MQ56gls%2FEC7g%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb806783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77cc23f4dfef3fb494da063dbffc4fb0","sha1":"5497f0fa1d50011c7d90ab2f3c9107fdb6617906","sha256":"6c79187930a4abc56242352b5d4d5a5e68e7a6837c129e4021ade79165774cef","sha512":"9998ae9c90a9a7a002c388e1bf176ee2730c6806e545707820f118ae4808994ae1552977dacefedf49e6e425b31819097e0be659b99e73a6bddcbf80594cfdfe","ssdeep":"","tlshash":"9c3123dc2178c39cb40679680786b8b13c5b99cd95a74845d3b3be12e88845d5e748eb","first_seen":"2025-09-02T04:43:32.34178Z","last_seen":"2026-08-07T22:12:32.646546Z","times_seen":835,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-avatar-2.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-avatar-2.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2276\r\nlast-modified: Wed, 26 Nov 2025 17:35:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6b-8e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK0MljDsfMD9I53JCHIC3aq%2BYiLgFRSgf4GV6C2VRM6HFAFj%2BAdUONNm%2Fqy1n2o7ziG6ywNqQQQqtCmvwDjpratWwIxOpl%2BnqiyOa1xQ%2BleSsi8IgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0b9ff1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f002c455a1cbb7ebb9f0e367f5a1aeff","sha1":"108acd639aef6dfb2988dbe90017ee4e693846ad","sha256":"3687604fcb1bd6ec80db705d104ab28909dac30e35be40ca3ef55146223af35a","sha512":"7c2b8f1cfc72675366802a003974b8d88fca624431736e4271dedebe9aba73b06cc1652fd6701a4d5fba09f55f6ed56abe021b07b4ce46c6cdb8c0939f0e2e9e","ssdeep":"","tlshash":"e3415cf92594b03bc0f4583a0c7c661a4ffa49e2534e0e360f5d9b6a19212325cd382a","first_seen":"2025-09-02T04:43:32.312857Z","last_seen":"2026-08-07T22:12:32.668971Z","times_seen":833,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-avatar-3.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-avatar-3.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2008\r\nlast-modified: Wed, 26 Nov 2025 17:35:43 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6f-7d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AyJLvcPO7xLnfym3qcDRKiijvHsd48MjTqz5UVmPs5N4TjUGeeB8msSaq74B8n3er1cvFuUO4080XlX%2FzpurXI7fflb2Er1kQw%2FfHyIBY3kglRUWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0baff3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41ee26398cbd792c2d068501c6fd5347","sha1":"87726c430c3e0306bfa296f1c9fbd6a0f10a1669","sha256":"88da44238d5dc9b340a7763dc85f16be6d31ed02e3913631824731f235a353f8","sha512":"7398a65a212717062749ebf7e94f743cbc52a00f9f0767682684ae74ef74185aa08a1ab410a5d0a4a4b433dfddcd59f71623bc28a708b92e6da2110c9d60bdb6","ssdeep":"","tlshash":"40414aeba80e426fcc9b4272727feeb0087f965c73618c098101012eeda3667474528c","first_seen":"2025-09-02T04:43:32.32803Z","last_seen":"2026-08-07T22:12:32.641476Z","times_seen":892,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/like.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/like.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/tailwind.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a57-e1f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5gEJlLVlfHQpbBf9oEr3mVa9Ou6IE1uzEs3Qb3Xe7Suyiaisym0IzuFyDgtVfCUZ0cwEPhxLx%2FNoyqT2CZNYolUN3gD51PiOEuzgEF3UIM2q8SZ6g%3D%3D\"}]}\r\ncf-ray: 9ba25a0d1848783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c10ef99921bedb522858b8452a520f1","sha1":"d8950fd5ebd9fc4c9f7030a8ad535a03ea502ac5","sha256":"8fc5c82557271bff7c7974b940f396c0e1510e56e149061ac98368c95138f2f2","sha512":"7a9f75653a67f9d6d57ba07927fd23c238e20b57cb1aa6856d8edeebe8399b6304ae108c8c30804b59bb911fc123df24257c6148a15b94de03317ce9f156f892","ssdeep":"","tlshash":"1f71d8e583e862f9504ba770c9369fa5736b3cf9374a8e8693c8ad8da81500c584cd47","first_seen":"2025-09-02T04:43:32.282519Z","last_seen":"2026-08-07T22:12:32.635769Z","times_seen":903,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/person-2.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/person-2.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10648\r\nlast-modified: Wed, 26 Nov 2025 17:35:34 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a66-2998\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sneVSwzJoMiu1vED0NwinoLVE8tTvhxRsrqHCVaP4knxLV%2BzCmdHACFAi%2FpLKVDQq6f2WBGd2nBUkDAzQHXFGTCMLvNc1g00tQzjYYap2ismAoJmtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0baffb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edfa2327930ec6423999a6d69fb76c9a","sha1":"81e3fb728ba396da3b75566072ddcf97ad363545","sha256":"8648fb6ee4ed9a15b421081681deef3c1d7d062781a01670022c2d4b090e6574","sha512":"3973c914c0c0d17484d148bed6da855adc62caebd3905f522769b860ce3531f301f9ec232975bc179a4831098f5b2c8ca2a502423bced57b37bc1b38727649fe","ssdeep":"192:mYNMtKwKi3mZIA27DqioQcqiVj1+8AuSIVz1e642Ldoo:mYNg7K+cIACqioQc91+8tSIVpe64no","tlshash":"4522af36afe22195f6a1d6394ca267d482f11b53c329144ab2be4e220fc52c93d871ce","first_seen":"2025-10-08T14:54:08.801965Z","last_seen":"2026-02-19T19:45:10.757281Z","times_seen":72,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-bg2.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-bg2.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/tailwind.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39994\r\nlast-modified: Wed, 26 Nov 2025 17:35:52 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a78-9c3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXlARI3BiUdmP3DXVWeem7IvevFPJj5LG3qfajdsZa57utCpTpLg1JWq%2B1xYt6Nrs1elFySNx73FmQd8DjZsducvrue3X0LehM6HMSUNureH90J5KA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d1847783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2004bc1f6298be7aca074e9a961c0ed","sha1":"5b72f53a98833bf6e5504dd6f4d25276b7e78218","sha256":"1ef40994ac3137ec249be87f309eb7daf3273815b9777f117ce3756a73297eed","sha512":"cb88d25b93a5eb666edca7749d9d6888cf6a0e24ae7fbe050a37aa1c8f785c8e86befb7377b4c4df8479e32e1d0b0f6aac90b4f4036ad7b15b15e576a1ca4f88","ssdeep":"768:wbiE5PVNCAPTF26XcQGcimMQxrOVdGNwMg6jKfHj2Jzr7:uZTPEs8mMQ8VKwj6jKfHWzr7","tlshash":"cc03f19748ae16dddc6271363c1ceb21a4b66a059fc21d86c787c6f6c7c3668f14d238","first_seen":"2025-09-02T04:43:32.347288Z","last_seen":"2026-08-07T22:12:32.630875Z","times_seen":818,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/EncodeSansExpanded-Regular.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/EncodeSansExpanded-Regular.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 161040\r\nlast-modified: Wed, 26 Nov 2025 17:36:12 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a8c-27510\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQkmxo5XfOQcYa3FdHdRxsH%2F1smC6cwOSqdZX5sAefwcM7M9HYp4sjcQNgBmLFWc%2FeE30k0mnU0Rbut9uEcVVlC0pT1j7gcG9IREg7xtFkd8klt5tA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d3850783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161040,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"09cef80beab41395b7406d15baf9a43b","sha1":"bf3eaf32c0a00c48e6bd5c173692c09bc6228b4a","sha256":"ef2d88cf3791a898cca0511f6866297247381a8147dcc60634204f1aaa37fe87","sha512":"8f5a3c30637653391455a5e079da16c34aa09d222d58b28226e9999e9363323ae3e3728abd2d376c9ecc40326bc325c63d96173329386f1ecd4d700f1f4f8eb7","ssdeep":"3072:8lOLJC8OMvp5WToy4PgIAgD5MCZy0BbKTtdSVJaXTkZ5IOgf3r2m/XpA/t7Tv2ul:8lOLh8TtguCy0Bbf5IOgf3rHpAFv20TT","tlshash":"eff36c0bf7a3e709f9551e74646883e572d2f8516f32c74fa448bfa8d4870ec08c62a9","first_seen":"2025-09-02T04:43:32.305054Z","last_seen":"2026-08-07T22:12:32.680859Z","times_seen":870,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-8.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-8.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5798\r\nlast-modified: Wed, 26 Nov 2025 17:35:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a57-16a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0muUGUiNsC%2FK%2Bnv3uWsisPuHZNTFuZl5x5HNFxZ9ZGQK47yLEpuIZmPWpEeM6g741CY%2BIWlUBv9%2FSybubo%2B2qNYhpL2ZE4AdgtY6WKllZOp07kVvPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb812783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ee770495b413c5926e83c67358c66dd","sha1":"f48986b91a75699f6e3307d39d424fc54c2ffd42","sha256":"a9213d53d2261af8ca283f6aa9a226bba48af80850ae213973337304a5a61171","sha512":"38ae1cecb17ae918791b720ae6d5e0f2e16513c0298bc3a211db332ace13ae85a294e1eefb4df97435bd56fbcdcbbe33f3f8d4bda3b923bd9a6dbc6bff4cbe1e","ssdeep":"96:Trj9Ugl+x7tyV7/DATNYm3UiaB+2P8cjo/AbnqrTOsgGdVPt7B3Qvo7ms:TXuycg7/DCYmEiag2P8cjoIWrvFT7ms","tlshash":"03c18e2c626e7e458f9d23fc3e85bc625c02224b6ec28c491ba4f55f6f8439143f018a","first_seen":"2025-09-02T04:43:32.317254Z","last_seen":"2026-07-31T11:15:26.017392Z","times_seen":578,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/bottom.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/bottom.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 99546\r\nlast-modified: Wed, 26 Nov 2025 17:35:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a67-184da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4vQbEMrtG4yGbFKlF23ptpQt12DyrFjnkmYjdE9RHdMau5DAHUdIxcgx%2FjGI8YIODMSoEgKbCbzkq3e66KrKIPISTn%2BCQCrCmHjUs1dydCEupzedg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bc814783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88108cbe23f34dcfcfdb96c13db08e7a","sha1":"39ef779c20c4e99005f542b1fbcd8356569d6628","sha256":"b825967004d9a1b6348da8813f70cebf175be9a8126d7284c3cfd74f8425e5ea","sha512":"88ceb6f3fc031353ad035bf79c82c3b1d1d4aec31508b3a90917c1ff25740e3bbf5d917a2bf5db3de0ea85cbccaa637a6ab4f208171819a2447d3f9c5346d48a","ssdeep":"3072:lYuuo5b/UsbYrEKwSoY31imbmwEmlfn9qKNiXnkW:lvuo5b/lbuEKwCFimbZb9SnkW","tlshash":"1aa3121976f65a96e8541f88edc2a77932b50fe7207370da3028ff36086863d21678dc","first_seen":"2025-09-02T04:43:32.314304Z","last_seen":"2026-08-07T22:12:32.657748Z","times_seen":815,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/EncodeSansExpanded-Black.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/EncodeSansExpanded-Black.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 161496\r\nlast-modified: Wed, 26 Nov 2025 17:36:06 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a86-276d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVvidd4BtYUeBgmUCPUX9XAYt22J0tbuYlKo1RFdqcG9zgOu0PtNsf7BjgEkzQEthdOJUXCtlnl90SeraDmoC4sew7qBG5kMdAVG7Do9dBpZsOYoLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d083e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161496,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"8d733c894ca18c1e271b8e648b605601","sha1":"ec5db396305437bdd280d2c5a857a507027e8d56","sha256":"de952ddb6b905cbddfca787502eadc44720735bbceb916264de6c427e58e89b9","sha512":"f4842689b731e5323b4d163abca8145971f1eb6fa30e88f1ca2d8467961342c90437a4965332eaa8ce74e75307ed0094164fd52913b3650838660ead87ec8e49","ssdeep":"3072:HokDRrC8OMv4GeLUoBhQI1LZrx0NrqRKoC+b1WxxEriV:HokSd1LZF0NrCKn+hZWV","tlshash":"f8f35a0bf783d735e9151e36a46893e573d6f450af36c38fa144bea8d8c70e428c52a9","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-07T22:12:32.622847Z","times_seen":1063,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/glow.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/glow.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/tailwind.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a57-2ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLQnd%2BgpTPF5bHQHlTHNpvrK5sCGV2XIntCkjkpjCArqrsSx6fzC1aJNC5ukYN6qdtp%2F%2BDR1ojDbWtVRsE%2BB3ZOKA%2FlSMSjlAMYTgSGiC5UBDl6Dow%3D%3D\"}]}\r\ncf-ray: 9ba25a0d1845783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a3f3d58c639d254adbe360efe2cd06c","sha1":"ae96f32b7bd60f327cac97014ac200a03983c736","sha256":"9d8a12463844f53b73f589446f70b027d397ec4b22b1c2d505a00c45ac0ce9cd","sha512":"cfac41234168567ddde2a5ffe3fa450eacb9b7c1f57005f79538c91a2b28741069a0657eb080131f120130b4ced175f998a9c32ce6304895faf46e77c6889b7d","ssdeep":"","tlshash":"29014434e35ce02fd654830dca5540c031fdc0d561d6400175d25f6f58e8853aec9364","first_seen":"2025-09-02T04:43:32.326694Z","last_seen":"2026-08-07T22:12:32.672676Z","times_seen":902,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/flags.png?1","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/flags.png?1 HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 70325\r\nlast-modified: Wed, 26 Nov 2025 17:35:47 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a73-112b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbiQliQNsDjGOS98VQLIJdB68FJP7oi3M8gYz5xkL9Dv%2BC5q%2BLd9E5Iyp7GcmzbzYJHHDHQOWFkW13dxomfGUx0MZ1tVDugC9gZE7rrX%2FWy9dsjlXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0da85b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-08-17T16:18:34.633344Z","times_seen":6454,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/css/tailwind.css","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /css/tailwind.css HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 17:35:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a55-e99b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlFIV1HqS4pXOeiUnB10trlsq9OPSNlCQC03hiza2Wx788YDXXjOxyeNxGo5S08XOWEaKloByZgGDXN6lKYwWa5lHLzQiRa%2Fzt%2FY0bHFevnraFgSXQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0b8fe6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (351)","md5":"6747ca752ffaa9a39f10c27eee5b5408","sha1":"f3f6f0e5dc6416dc66759a4bd7cfab031b6743f4","sha256":"be4457fbba45b2def61e12a8d394474fce7b85b919d571020ade607b6031d8db","sha512":"5177a7c9b0aec57fa9a825d5f0b0faf6102d67750bd5f058ca8a98939693d59a2b12a000cddda98272364ef194e27683386b594090fef365fc57d988c0f7ad8d","ssdeep":"384:wbZfn1j9535QQ/vXPPikKVI9sAXJoF7aATNYxPWrae7yl:wbZfn135JHPKkiAXU7yl","tlshash":"bb43761a97e1d6683c7ad1b0a109a4c8763e2195deedcfaef8f01010df84be45da7d18","first_seen":"2025-11-04T15:41:57.615464Z","last_seen":"2026-01-24T12:38:40.460608Z","times_seen":24,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/btc.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/btc.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a70-567\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbyIqGU73mD2WjjamdfTDlMLG%2B10A8wYiPcw7nImlZ8SjwgaOiaqDipPfBvEeyV3pQWP0v2voxnkCaT4kEJUWpHcYc7hVIcG6XV9KDH11CsEyqZF7A%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08b899edc5746ab897190fc4caa0a883","sha1":"24da4aad4cd7ed97d096df6c277c6e7e185a2130","sha256":"5a837ec546b5cc6b85ba9666c287c5183c4ad87e22d4670f891bdd60297b0bae","sha512":"892ec9c3514f9cbacedc42f87ef287a468867ce3a6bfc73610aaaea7b6503339055d15cd4dacc8d9d18ba23f883d7f3f41b1229d77981b0b8ead8135caed9d3e","ssdeep":"","tlshash":"3b2120f1b3ecd5c59a8857f0552d78b17d3230f1ad1ad12c86f07fa1325a42e0928cc5","first_seen":"2025-09-02T04:43:32.272741Z","last_seen":"2026-08-07T22:12:32.620341Z","times_seen":1276,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/stars.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/stars.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a6c-89b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqFki51Upcf%2B6k9pVix5Nt%2FMizfzsTZHtmqpyNyZOMr%2BLqk0bbx9XWYebvWAPLyqHSarYixKIM7N%2FpWHXGjQ7GSukL86zSoxK6%2FN2UXCE%2BwazR%2B5nA%3D%3D\"}]}\r\ncf-ray: 9ba25a0baff4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5f46c787a1e0651d75603195a101a46","sha1":"2e1b5eab0082dd1cde7729696f9aaea6ae00e171","sha256":"adfbc7c2eb5a7bd50ba738a956c98508155e845bee22dbd4ae2b6a28e5f82c52","sha512":"8c928c3cb1ce4c6e4a78af922a97367600a7ff1c6f84fd57c9919f807c06f8fc98be8572822376ca5efa53dec6eae031fe52c12029698321d197bcc838434ccb","ssdeep":"","tlshash":"844104a0731c93f49056f7f4fd29a96635203d7e9b8887f4c2d12a80d4b72a9d58fd88","first_seen":"2025-09-02T04:43:32.301529Z","last_seen":"2026-08-07T22:12:32.65684Z","times_seen":1278,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/kraken.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/kraken.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a65-ad8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gp6kv340y2%2FDDEEFX%2B20O%2F5mJkgB%2B13G0v%2BMmvtZ5NEhGwdqagOnUG4GRn%2FC7oHbiJwedN93NQTBCimsv%2F1yvVTLTEnMIy2TgfkUqb7ekxx%2BiK1uCg%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb809783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a88d6175c0fdfc14d4998e0aa9ac7959","sha1":"3886985b7a635d4cf8ae3d50db49d63c42dbebd6","sha256":"533b51e295c2ec894de75538b9f6f7ad23b0fb18cb5d55de02ad6eec6618af9b","sha512":"02caefead63c07312097e588f26540e3ae602769a930c25b5c21e59b93d6c788cc13db0d473382f4cf84d4716fccea69e3243ce74946524b0e2b6284ce3d4ef8","ssdeep":"","tlshash":"e25183a8d37ab218f004b7f88b07a8b481826fb42705ca5daffa0c1bd99500e1c75dc7","first_seen":"2025-09-02T04:43:32.260297Z","last_seen":"2026-08-07T22:12:32.620931Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/Inter-Black.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/Inter-Black.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 316848\r\nlast-modified: Wed, 26 Nov 2025 17:36:18 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a92-4d5b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zN0HP%2BCAQCXME8K8yjFPexFl7Dl560bH1tzJ4I69sAMwF1mXgesGeTVdDRu9tQ4BVSIKxA%2Fa6hIuC6tlpi0XGTwdhHmT8Hzn4N5R%2BxVmrCvFgTGXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d083c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316848,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 52 names, Microsoft, language 0x409","md5":"118c5868c7cc1370fcf5a1fc2f569883","sha1":"f79fa58ace5f55e338c99bf71e7e0702841df6f2","sha256":"4795b76b5b54d140fa17432eb4ee2eb27c63156ca0c8184ed27c4781faafe276","sha512":"1dcbf0476cd7470c359294bb360e141af440e407251646746ff53e57b302a70f4f32b775d16d19219fbf562b9b1ef5e8ee05546bcbd87a2d297541bba11f084c","ssdeep":"6144:wiaT14OiMsRwis9EzgwfxsW4unPLx+0woyN:yWnMr90gquWFnzxCoyN","tlshash":"38646a17f327c35dc5132e368b96c7a47363bc917a02e10afb243a95c98b1b05e9b5d8","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-16T10:33:28.614831Z","times_seen":1092,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nOrigin: https://wanterflux-invest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 56438\r\ncf-ray: 9ba25a0f2857b500-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-bma-essb1270040-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1649292\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BaQoqcmZoZDiIMQPlNIA2p3KJ8F6%2BZ8aeGsASEp828P%2BGJHx%2FxKhvMjf%2FdND%2FVlTArVe7Xc9lVKYE9XXujst9hKbOQZ%2F%2B1yAXGSsndZLf870SSRudTN%2BkVtHGD9eUk3nklA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-08-17T04:13:03.778483Z","times_seen":2059,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/person-1.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/person-1.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7768\r\nlast-modified: Wed, 26 Nov 2025 17:35:42 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a6e-1e58\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYbkad3pxdWLXRJZmucr6R2pueblr147xgpYCRn53T2H7pAai93jM0nvxEJ6NQM9Qta2PzHci4OTgjz%2FrkJDlXXjtz30F%2FF5SXm98zGWs8PxgUM1Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0baff9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f04e2e104709a32f961a302e0c13ec51","sha1":"290605a96f38aacce45eb5312585e8a49aaed0bc","sha256":"879a3518e687c76d04c2d41ba852562606c3b29188f8e5ecb9632de7281b7bab","sha512":"9a54ca15ee61d2c0c1839cbea63b4f8e4f57898a9688ae80759672389477cf57c4ed7ad22d1ea05dbf35df5c4acd2302257b19da4e55cd4d0b11cb0c2e2aefc9","ssdeep":"192:XYNMtKwKi0FUFOykhoz1uVPPgvQ+27GYq1h:XYNg7K/CUzoxEXsVP1h","tlshash":"d8f16c754f975295ea1bee34cdd0abc882f74a11fb90ca42b02c49365fd51802f9b18f","first_seen":"2025-10-08T14:54:08.825751Z","last_seen":"2026-02-19T19:45:10.74085Z","times_seen":72,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-7.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-7.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5552\r\nlast-modified: Wed, 26 Nov 2025 17:35:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a75-15b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQj04vcZU9QIPFO4d4UfW76P91s5VgY4K5NgHrO0u%2F%2B4aCB%2FM53a3FOplfsTJLKA%2B0EWKKpYrFAON7VftRXlmcbVbQUG2eZnlR1XvQgkU95bz5JNow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb811783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27470bec9f071ad8fbfff2b5cb912ea4","sha1":"1a52e1c82ac31158da0d0d641e2169a8ceb1b7ce","sha256":"7e1f70cc3d6d6e8b533fe17264755bb6a15b520870812a802ac8f54f1fa0e357","sha512":"4bcacd7eafe5962dfc3d70266a978409b63f4ab08781bbfa25ceec2f7fdd60f331500f04f99cc51b2fca6ee3132a903d7bc61d3518101e3bb11d370a841c88ed","ssdeep":"96:iQb/w/YtmuTEwoLPRpH4r8TLL2jNyzgT0WclbVYg2QphfgTrTs3nyCspeUs5Yd86:NESTEhzRpH4YbSNXT+VYgdurTaVsxUYR","tlshash":"3fb19eaf9f5b2a6fe2c2e73b155c356a121f534de218897d16a0a262472c3887e27084","first_seen":"2025-09-02T04:43:32.325136Z","last_seen":"2026-07-31T11:15:25.991275Z","times_seen":578,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/info-arrow.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/info-arrow.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a6b-1e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qi1SOEvcG%2BadoOMzOVJjzMvDvjB8fABkxFvmaMLh2DTvN5GfQqiwIebGrKN4ICkBtMxX%2BhSZBAhh3NJQxp0GOu9iHWux9g793XHZZHOZJHfNfomTWA%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb80d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7000561a2a36f6e67dd92e77cbb50d10","sha1":"0059c6b703952d15dc05cad181c1999380a9454a","sha256":"b05aa3927b700369237f9d2ff209fdf0f4867935cbee04cd1bbbba66231cc7e6","sha512":"8c7cedcd717b2ae9b6b59fec21c9aefabb935218e3f158f81b653b5224094bbecac514b5dfe11f4c3763914860064afbf742aca3cf7f1824a358c185ca5f0d0a","ssdeep":"","tlshash":"9ef09ea730841086e00defb4f02c544636c31cc3b488412cdd4c660ab6e47ba2d40e54","first_seen":"2025-09-02T04:43:32.262978Z","last_seen":"2026-08-07T22:12:32.643522Z","times_seen":904,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T09:15:37.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 09:15:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svqjj6OdkuWyrPuNf%2FZ1EYtqC1ddjYGBRV89yBJlDDe2lHP5ebEh7r3Y5EZG8Bw55h9Nh5qUtUItFBFwkqoTaebNjw6NTNfk6afkKN4kRgOaBfnWZg%3D%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:;\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ba25a0a3c0d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61161,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"bcc79f9e385373acc0a41948a9d8749f","sha1":"087dd0cce2b6e03b4b1cdd2f28165fdfc0128ee1","sha256":"2a1bffd04db521e68b83fca50bca3d561af9518b40c57648986727ae16cb3499","sha512":"8b58089f64cee46a3a102486e2d730d98f16a7a01f7464ecae66e86bd000f436670dc07d1e16fccdbb72334e88a0aad68d418e2f3c1ee4877af6f9b2ede0da84","ssdeep":"768:X8pFQaMZb6YKAGYKA7+64LkBEsN5ooD50:adOb6YKAGYKAK64gBEsN+W50","tlshash":"8353932002e1147b518381d4fba5af6aba94ea47ca1bd649b7ac07d51fcbc82dd6331c","first_seen":"2026-01-07T09:16:09.14812Z","last_seen":"2026-01-07T09:16:09.14812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":28,"dns":9,"connect":1,"send":0,"wait":45,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-arrow.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-arrow.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a64-1e2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rvYeOJa4sgb8nk%2FHOTDBTRAXBQ3zxcQrB7o2dXCsg%2F1XZ%2FRU4nWwZMfcQeJ%2Byzcu6VoOAR1W6YXCu9PB4s4L6q%2F0pYQJ1aAJB7LPZ%2F9bADqVxFQGQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0b9fef783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef279923440321565d5b5eccf70e2a1a","sha1":"7d3ae164864496ff78f2207f0e5d7cf720117a56","sha256":"1a60f0679cb2ef0cd2d3270f16e34c7897e9998a24dbe1b613364bb4ded1ac7d","sha512":"ed1743bc7a967ce62baa78036d72e2ef91a315323307ce7494c1f16bb56ffa1e7dcf94045598344ce763b03c932d79bad05970e9a98a716a49b0cbcb97642bc8","ssdeep":"","tlshash":"c3f0e2f696591548fe8f09a5d9986c4b056a0adccdcc02c6e5506e105efc0c29cbae87","first_seen":"2025-09-02T04:43:32.334597Z","last_seen":"2026-08-07T22:12:32.640928Z","times_seen":1277,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/payment.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/payment.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a57-7bc6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAzvVAYMrw6JJD5aOXuPVnMBIk9mVZapFIMJzBDVjzG2wZEWD5wuAN5GlL%2BxxGoUoYq87kez5TFhZjcNTDkVRaSyeqqEbRkMzoonegxoSSEMeFPAQA%3D%3D\"}]}\r\ncf-ray: 9ba25a0baff7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9857cd226493e46d1f9d1da264b98ca7","sha1":"91d7efdfb03bdf612c1279b05b55a6299304bb6f","sha256":"8d4f42fb0c221eea7cc3bb6f8f25434a543644d9f20257c749c617c0ac8fbe1e","sha512":"feb167e1811234de452b58bc81647471bebe7bae1c845c73021e0a7c0cd538a28b55ed29c0b15f790266018680a0b4f8394ea193116656b328e3932a11f8e554","ssdeep":"384:3sn7jCC2N62crb+rBEXGZQNM87Rg/BzZQTraKBzBY0XDiu23dMcgjZZLwiywoqok:cn70MSrBEWlxBVMuKBFdTiu9ccXywak","tlshash":"bbe2c7e963faa2d4d58cebd36f94a1393d1320f75eedcd10c3ad4e68aa4486c4c245d1","first_seen":"2025-09-02T04:43:32.335925Z","last_seen":"2026-08-07T22:12:32.62665Z","times_seen":900,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/pros-2.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/pros-2.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a63-1c0a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X00iqYZYzzbhcgaHM%2FiHRXL7m4I8O7MDC0Evm7i%2FbC4CQflPWmczbU0bTFGe5BRXBKUeNC8pOqMyGPavO0hbHb7ST2xT6WCBNDdKiyA210Y%2BKR71jQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0ba804783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7178,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ccb30901fe366e2c16716a76b7d5f45","sha1":"c843a8c141f8b541601ae8a50fc3cfa336d4844c","sha256":"a08ef793cf722e6ad68e787ef6d77a1a7479b4a90ea93c9e9ce04095069fca89","sha512":"ec261437779ed5fe498752027945ad78b84044e60404fc713e0afbe960e80ef184445a8f920853838d13a12e01519c23fb08244c4169df62dcc9bd7d7c59a5b9","ssdeep":"96:VKHrnlEeDv1dv40YDVpMdbZYdBMc5jsRSq8J+org8R0RCeALrS/rw9HO:VKHpnv6DT5XCEdprgPRCqU4","tlshash":"08e185c4372ac3b4f409dafd4219b4757e527dcb761380d8c3ba1d4ab88a42d6da98d3","first_seen":"2025-09-02T04:43:32.249675Z","last_seen":"2026-08-07T22:12:32.70004Z","times_seen":835,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/coinbase.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/coinbase.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 26 Nov 2025 17:35:40 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69273a6c-3bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ylVNYXPKAUQmzg0Kh5JPHeH%2Fe7vbCJjDG3%2F0urxRc0qd629gV6Zn2QzHl%2Fy402IbneHxzyDuYpsGDntIGwc4UpD%2FKpjomsohF1MbKVAmt8F5NzMMQ%3D%3D\"}]}\r\ncf-ray: 9ba25a0bb808783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f07c782d3f01b7b31901fbb318590e2","sha1":"645433f39d4e78328cdc592a9bd28d57d179ba15","sha256":"de81b810f3c1ea03aca8625d43f24d58ae5cab09cf2c086d662bb438bbeffb56","sha512":"d22e07c679c625f3303deca2624a27dce963d4b13fb16de04477a0b07fdf841f0ac4fcab1d21a79fa74d85518d8eb58c8fcd48f2500b6f580faa895c07cebc30","ssdeep":"","tlshash":"f611e13c9128530c500433a85b76216616b666d8878e8b687111bb633cc945f8ef7bdf","first_seen":"2025-09-02T04:43:32.257454Z","last_seen":"2026-08-07T22:12:32.628085Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-9.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-9.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6022\r\nlast-modified: Wed, 26 Nov 2025 17:35:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a61-1786\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuWenImjYjOpzGln%2FTIO3JuretJ8E1fS4rTIsyKzNxcQyqRHW59OSUgccxnASeNsEnuII4sFmFLA82w3GrGrAIO%2Bf0KZJsn3qyqRwAqB3QDOcS6Y5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb813783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b304bedf039a19df3c86295509dda56","sha1":"5074da65671e25d7e348696aba52f9cfeeee09e1","sha256":"c66ac7538bb1bcebd7f29e5af8f8715d2f8bb8e9064a0881f7b69c9af6d8886f","sha512":"8a863b2faf17d079c6eed6b8a5848aa2b69d42f882c821e4e28a4c2852859bc3f5f06066630a2812554fb2a413972497db008594b058696be60e433377c5972f","ssdeep":"96:c38CNuiWJsLmqZ4F8Yt9Rc5uAgiik2evEhq870wKHuxKcuxE2IP93wLEUlk66RfR:SMi42MvRAmiipCVRwKoS0lALEx3Boyl","tlshash":"cec19d711ff1a028de69ca3544635725fa8481be368737188b3c45dacc34e236ab429a","first_seen":"2025-09-02T04:43:32.288955Z","last_seen":"2026-07-31T11:15:26.018561Z","times_seen":578,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/validation/intlTelInput.min.js?v=10","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /validation/intlTelInput.min.js?v=10 HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 27 Nov 2025 17:27:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69288a15-8e7c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FXIuzwUWJrbSBYWhnkCA6Uu9Gx6lianOfWH5e5QnQ%2FrLvhQ2TizP5cs2c994HIZH%2F3m0TXhE2Q%2FWGbjJ24f5bBqU8hF%2Fx16uLkXh%2F0BHwwZi%2FQAEw%3D%3D\"}]}\r\ncf-ray: 9ba25a0bc815783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29515)","md5":"7317b48cdb35e297b9d4e310fdb883d5","sha1":"f90d459765d89e8cd09deca2d7966212461defae","sha256":"23d6f9bb4164753ea3bce9de27121dcfc685b09a89c59428b35b0c1acbe084d8","sha512":"a96ce4f7d722aa4cfcfaee4531e6716d12677058e416c6c4f168e9f21e1df2533e9762c7c5ee452daddddb56cff2e3e531e0f52c86f55fcfdd9c225f6d877b31","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68ikdALOpQnRViRssZb:cDiIz8A4knYdYkI+sm","tlshash":"8ff2e9ae7371163766be82fa70e64503aeae34469604443d389c8fcd0b89ed171f6778","first_seen":"2025-12-05T04:29:08.556791Z","last_seen":"2026-08-16T01:27:42.764439Z","times_seen":766,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/fonts/Kanit-Black.ttf","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /fonts/Kanit-Black.ttf HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 173492\r\nlast-modified: Wed, 26 Nov 2025 17:36:04 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a84-2a5b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12EtZ35%2F5pfp6NQxwT0CPg42%2F8zeWofREn05%2BV9vAbDH8QrjYJy26IiQ3rz8OtmtG2kCM4JKJtJ6n0dHEA7mvm%2FHNxEmuqxHHn8igpX2CrWCnBnhPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d284a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173492,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409","md5":"98e93fc09832d3891a57162b83ecb930","sha1":"7d7c545de2f02989d1f2a76849291b75f6e6b7e6","sha256":"7f6d2b61aeaa7e6e1d1f0a99fee666c688650f00254786a1f48bfba31ad63aa9","sha512":"41229779be59db29324f4716122da85948f6de5f05de483327b85a888a424527813331a827bb1f93db3ef8e875f706c0658b28126d1058604c8aec953402f2e9","ssdeep":"3072:T1jSTGGQ+BqRF4LwmVIIaVyL1PhllxA4DUgaTABYcaclGT4I:T1xGQ+Bo3VyL1PhllxugDScaclGTx","tlshash":"7a044b07f749d789fe1a5e382769a71ba294f0704f5787cbf08d3679e89a4c01e192c2","first_seen":"2024-06-21T13:38:29Z","last_seen":"2026-08-07T22:12:32.661041Z","times_seen":1024,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/css/fonts.css","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Nov 2025 17:35:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a56-187d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlvjYCdt7A9%2BwDhJRRZfeWzd78VQt6%2FNAI5pAFV72jd3T1qZQAUDXxPI3s4SkTtEf8QVrD3S79VTxmgaDIQf%2FepHgqC0ILQY9xT2pqnkIlww7cxlqg%3D%3D\"}]}\r\ncf-ray: 9ba25a0b8fe5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6269,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4be2e7a7972f0475ec4bf236546e9415","sha1":"5121b58c43728696b56f520ca5ff5312378e3054","sha256":"e89f525424dae426022943163c26e9d965149f850949fe86890a53c22190f6dd","sha512":"372047d4bff692e888af38f4be47df1fe5dcf2b671a12ccb3588b1e52cb91c7bfe0a551538d9de225bef69a14a735daef14f15cf007ea773e02b0a22a874e8ae","ssdeep":"192:hpYwZkRQlWJDpi8FOWbIbNp2cTc+bM5l3psA/nlOpNIEer0CGxQ:hYDkg3eulgyfQ/+","tlshash":"c5d1c400045ea522ee622ea9738faf196e5c18067155c5af4bb80cb95cff52783e4f4f","first_seen":"2025-11-04T15:41:57.575763Z","last_seen":"2026-01-24T12:38:40.46876Z","times_seen":24,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/header-bg-mobile2.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/header-bg-mobile2.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25708\r\nlast-modified: Wed, 26 Nov 2025 17:35:45 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a71-646c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RO97wNJZXqRWWG0GOo7BkOT0eorxfXkd4gf6mqy4HCXQppdrkfU2EvYVm17glF0crCFrXyYF6pGS1zE%2Fku4o2fTdMbELMvvbEtrTb1QeUqEgkFXeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0b9feb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8179eca6cacb540539cd9b74f711fdd","sha1":"5cba7acc82732a756054aa3529eac3cb85a3557a","sha256":"6efc83b8bf5e579eec51195c4eba7f58df2487f8d195f07d59b0741bd6ecce39","sha512":"ece42e75e994510373393c040d56edd7f44b5c3612c1b5552e3ca7111abc0312096792b5e8defafcbece652da2f21a3f8ec439db2426e31ab20ce06dd24487ab","ssdeep":"384:p2ESfIf9teHWKyJsBp1p4RrCGUWRsLGNr+pQNCc4b+cMVOARGCU2VW7Cr8xYySTz:0ESATO1SaWR/NBaiuwVW+VQUDr4Y","tlshash":"c1b2e183f37074daa07597f892717d2a79a8039013b98b9c3687391fe53a510779d2d8","first_seen":"2025-09-02T04:43:32.280027Z","last_seen":"2026-08-07T22:12:32.638836Z","times_seen":881,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/ltc.svg","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/ltc.svg HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Nov 2025 17:35:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69273a64-408\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bgkhk5z8Stu%2BG%2Fb04fQRKB2t9KETHXbeR%2B0OlnqZpnL8m6IK7ti%2Fn9saFgC4GUIutKSZgvIjCK0g8o%2Bxzw9aVWZcsewYq5hulZyC1BCFvkWt5189%2FA%3D%3D\"}]}\r\ncf-ray: 9ba25a0baffd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4a6bbd896e770e829a30e835714ac49","sha1":"7a9fe65f4227ee71070e76c345eef4e1f77850d6","sha256":"32d3294815fc7a945762273c76564c434e395d8ebe6eab2e9edc8e3cb74076b6","sha512":"cd82a14c15b0307501bc59e5b0bf4dcf3edb39a0bcc51b42d5f439ad23847da574e357b1e4edccda6d2f17e57332709d1b1f5fbbf43019614f4ca1ec494360cb","ssdeep":"","tlshash":"8911ced0b7a977f56484c338826c3071647b3cee1a215d784ee43841752140ecc52eac","first_seen":"2025-09-02T04:43:32.275483Z","last_seen":"2026-08-07T22:12:32.698873Z","times_seen":1274,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/user-6.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/user-6.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5244\r\nlast-modified: Wed, 26 Nov 2025 17:35:47 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a73-147c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGqo%2BhHdybd76BYPUKk%2FoKwAOJkq%2Bc%2BSzmOIkWipXBnzs2DJ3qhvGBVdy6Fra%2BQfj32ZOHvLZzCwDExtZIldwvff6345H5ZaWGJ7jjUuwz2%2FwnjxYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0bb810783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0d456ca39c3ceb6fef7ba18596ff0a4","sha1":"f7af1c6c1b8a072b157b008934a40eb9cf32bd1e","sha256":"da44b1fe0c069950bfecd801f6de0de6571c34de7d2412405c8436c13259eeae","sha512":"e48f815380255e85a7e03e302ef8d96efde07d8dcae440f3235a8fbbdc441601951f481f573fccf2838158e27ab6468fa13bf5984bbfbca3b87aba7c71d9ae33","ssdeep":"96:pIH4oJRXEbKgAOkB9igtod9ApERdqkC94bpZyV07uqkckCVyK:GzXEbRjkB9igyd6psqkCCNoV076UQK","tlshash":"10b1ad11b5a34f94f8cf0a70883df720bac4808e2b2ee7950e7133a242294233426df9","first_seen":"2025-09-02T04:43:32.329512Z","last_seen":"2026-07-31T11:15:25.986409Z","times_seen":578,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/images/pros-bg.webp","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"GET /images/pros-bg.webp HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wanterflux-invest.com/css/tailwind.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40462\r\nlast-modified: Wed, 26 Nov 2025 17:35:24 GMT\r\npriority: u=4,i=?0\r\netag: \"69273a5c-9e0e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvhwDtPrwtAbkfxuYzBtyOusX37S6WSAmEgkuBtwRbmy268UhcSTCBEq2sQ0oNyhIoqWce4%2FH8UfgNhq28Ya6CRbC2CMtqRtgkNtVC%2FfYMYK9lzuMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ba25a0d1846783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a552bc7ad58597757b953a47ef50de2e","sha1":"ae607ba3cd8f2986ec9f2dee80ae90f28cd1eaf9","sha256":"7af56b3431d35b0264020ac4eaa6ff1ca05a72a64647fdea890e9814597da6db","sha512":"b976c4950c93b9743666efe43261649a885163865793314992bd7990b42afdf4c34703bc01cb8abe742559e270b203a06e1b6f1f184bfdfb8e9062c88f3417b9","ssdeep":"768:euKXMkiH1mxkbLyKMVgJWqHgSSUxyt7tdWbbfNFd93raFCoDHXeX1rFYv:euTkImxcPn4Yyt7tdWbbfNFdl63eX1A","tlshash":"a603e1d097b394eead24862349bcfdc2576e36e18b429b8282c7e54a58378df9532130","first_seen":"2025-09-02T04:43:32.343217Z","last_seen":"2026-08-07T22:12:32.634811Z","times_seen":886,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wanterflux-invest.com/validation/style.php","fqdn":"wanterflux-invest.com","domain":"wanterflux-invest.com","tld":"com"},"ip":{"addr":"172.67.144.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wanterflux-invest.com/","date":"2026-01-07T09:15:38.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wanterflux-invest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 19:18:08 GMT","end":"Sat, 07 Feb 2026 20:16:52 GMT"},"fingerprint":{"sha1":"95:9A:BF:25:10:E9:DF:7B:2C:7E:D5:DC:D5:57:B7:8E:2D:95:58:B9","sha256":"8F:A2:B6:F2:66:41:B8:AA:35:D6:9B:6A:AB:24:A7:77:50:ED:4E:AD:B1:39:A1:76:20:41:8C:90:A2:AD:C4:62"}}},"request":{"raw":"POST /validation/style.php HTTP/1.1\r\nHost: wanterflux-invest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wanterflux-invest.com/\r\nOrigin: https://wanterflux-invest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 09:15:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=mjask78pbtob5tgd7vln8keh5k; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:;\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2npfiwulGQgG4dso80ejAVsUz7lNFRensM00CAcKtHZTO153dVwuSQKDt2ETMzgBfb6cT%2BQoKd808gJyWAmvFsv6NvdCoJSgLuBvZCcbKQL7hhMunQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba25a0d8857783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":22,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2718d3c83645f26bd3291fb2387907e0","sha1":"f3a6e68d15c4a2c9d9e0c83dbb1521eae9582acf","sha256":"cec2ac230ecf8e31115e9d0f880d719eb7563f3bd78118656bcc6a713ad07a47","sha512":"cc4761c50ca9506ce27a94d5471d0a4d73d622aeb851aef279047799fd6a8e3b736460ce9a2fea5b4dddc93ab4d472a15676d4787f58b4ad45cf20461e2b5286","ssdeep":"","tlshash":"8d70002220c2820a8000a0ca0808003208383008882a020882080a0882220a80a20000","first_seen":"2026-01-07T09:16:09.160632Z","last_seen":"2026-01-07T09:16:09.160632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"wanterflux-invest.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}