{"report_id":"0b69aabb-9c84-4b34-b522-3b1b0a136013","version":6,"status":"done","tags":[],"date":"2026-02-14T05:00:22Z","url":{"schema":"https","addr":"inv-cx.com/","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"inv-cx.com/","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"title":"INV CX | Cryptocurrency trading and invest platform","dom":{"size":239791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2644)","md5":"c8a2f2583ccb6f6acee169d569fc9f0c","sha1":"72c0c2730ce5e1242a5de84777afa1565dc1d809","sha256":"615e6c18fee3081ef8ca7d3e0c9e9e81fe5caf9183859f0f4c44c7e7ba45e4a6","sha512":"34317ef6521d259437442ad8d63d506ca0323f822f32bb64330bc36319f28c1a21706f4b702d0c6f807b2d8e75f5fc6fa93943d7a2382c99e7a53ce5977a89da","ssdeep":"1536:dmIw7DPD+DuuDqD2D2D/5DaDCDTfr9VR8+4Xr9VR8+49N5WFhsBg+O+N5WFhsBgA:a/6LB1F1oM6H","tlshash":"5534d6f063f892e5f04193f8d63959763e6728ebaa12c14873ec1e819f9149d8c97c87","dom_hash":"domhash5c0ccc764a57ca10514d4665423209d8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"inv-cx.com/","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T05:00:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"inv-cx.com","ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-12T21:30:24.707939Z","last_seen":"2026-02-12T21:30:24.707939Z","alert_count":94,"request_count":47,"received_data":2197780,"sent_data":20723,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":5,"received_data":154755,"sent_data":2625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":28518,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"inv-cx.com/assets/js/app.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","size":3615,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.195384Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/app.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"632bdd284f17fcd40eb5a0f445472e00","sha1":"7fc40a9cb81f873ee8b6ba04d30161a8d48dbc60","sha256":"87dbae4c0439ab8bf5607748f3dd35b7b138cfdcab2efc94a1bbf6773ed0f131","sha512":"c81b3463d8fface28b4fdc2f198b561ccbd5099935bdfff005cbf6e2ae5df6214e1764abc32be18285747ffd5770bcc05a2a3ae1ff61e5b069d430ea4c066765","ssdeep":"","tlshash":"31f00ecca80191bc03bb40c0226fd1c87c906832e0a1d1d501f7f34804941e512b5e6c","size":488,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196152Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/header.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f1eb758c539563a116fd6205f2cbf3","sha1":"fbaf0ea4381ca7def60922205a42f6372afe0fcf","sha256":"4cf4cf24c46ef18a23275d60700a827e4106aa462659f46da1afc3807e8e33ff","sha512":"d138c6538254710cf342359349a96f1fe0669e444bc94f8bc3faede81c88c0c9240f7426c153788610d47c1ec99b98ede8956d3a163a5cb95f1aef9d9ce26cfe","ssdeep":"","tlshash":"41f0c269470c657a01a20ddbe7e1cee06e1058d7d440247215a5cd8f4be9ce2d2a03f2","size":563,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196831Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/cryptocurrencies.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","size":749,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b4e23f1daa5a9424efee0e6ca7fb63f","sha1":"278aea6325506a82f966dd87ed928a9075480a95","sha256":"3ff2b38a7c34d0f3f53d35fb7aff10e229c271df0fd87d29a27762195852ea5c","sha512":"67759e6f751da2b3efd4cd39b6dc3bbc141c86d5482c39db1c080ea5c19996086bdf9fc4d26649f04f4fdfc7b89c5d326c2479b1f28773d0b34aa10d75e3ad0f","ssdeep":"","tlshash":"bcf02709b8be6ae410f7755a399bce4878748ecbda184f12308e4cd50f0b15c385734b","size":467,"data":"","first_seen":"2023-10-27T07:31:00Z","last_seen":"2026-06-01T08:48:29.197626Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/npm/swiper%409/swiper-bundle.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140575,"data":"","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-06-04T21:04:51.579976Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/news.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c640d083b2dc81a6f9fbde817552e97","sha1":"ab789ac8a70af52dbeaf56b606d6914295a71eac","sha256":"3501416396bd8a484e2b3ddbec46e6cc515d68ac7a42bbc733d52bfa2a4e2329","sha512":"94c0d460ba6b4bff1419953fd2a6b828d39deb51363d774e632bd7ebe200d60efab1e8a91b5b503fc72f9f496509d90eaee206d736441e0b18f51baf1c311fc8","ssdeep":"","tlshash":"15c0805d1075718403a2cafe5474ca42c573013797d7493fcaf404f984ee5580afbb98","size":177,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.191352Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/js/jquery-3.4.1.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-07T01:13:10.263952Z","times_seen":5115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/js/toastr.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-05T15:12:51.710408Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/doge.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/doge.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0%2B%2F7KkZjcCWZCnthCWv7PcY%2FnQzLRFZp%2F%2F10KU6hjF9THDGDmTz3lxNDqAVo9%2BBm%2BxZ7meAnrdET%2FQXlO9MVn7FTRqFjGqWco4%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd048be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67d2dfdb52eef2b80841495b78f1018f","sha1":"e6936e824ce5c278de5f8d7b501089499dabb680","sha256":"b6cb5aced522b0baafd4f2e9f965ec537a4d6af3e6abbbde71adaa3f502cf2ad","sha512":"5b6edd3c5cebbcd506cc31e647dfc89ad60072ab02213c7ae2a64a8bfa3401c8494068bd58ab44d98c0626567c80db60be19cb8c98bb8367a689af6f7084095c","ssdeep":"768:hf0GUz54Ieqz06WiyE7ujsxZHiU4BwGB6SoBj5I2Pns2v+TihJ:+pD1WirujsxZfeMIqqiL","tlshash":"3d23cc3dc358e3399c9387bcab2aa0e6f4ce55afc1e0d3985169c4b073911d8a38d9d5","first_seen":"2023-05-24T12:00:49Z","last_seen":"2026-06-06T10:50:44.828272Z","times_seen":406,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/npm/swiper%409/swiper-bundle.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lq0SNxRyAikah7aKhHZJkjcq8ZCOsmyMO9UlAgCv97GEsmSotkLZw75x%2FVAp5XXqktsLqFMwTKmQyGumukPki9LfGQ3wovX1vss%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9bce98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812), with CRLF line terminators","md5":"8aa3f98e02499b9046bd9d4ed02c6fca","sha1":"08d56a14d5a20887413a32d360cf16b491d1a4c4","sha256":"910c8b82fbdf93e2bbf25cec82c501e8f0f7bd0403b08789db126479d3f96538","sha512":"171d50dccad4330ca115c5b78a6d1e878f0102297489169d8a4d97d94cede5bf99ac0ca4b68bdf89253b2c9b0be7a894b2af239b3601523b685a1f1250f0cf75","ssdeep":"192:rGkmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9Aa:ryUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"a08244a86340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f2a9","first_seen":"2023-10-27T07:31:00Z","last_seen":"2026-06-02T08:09:34.247791Z","times_seen":508,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/fonts.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/fonts.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOXNrGeZrxDaFRVyn3kZhioLIA3MKIxTwYdXmvO93CdYTI5GmY6b96iwfJUlCjUFJyWoSjYfE2IsgEyywNGoU8KsujfBni8cpEU%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccec8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T06:09:44.347981Z","times_seen":16205388,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/home/Illustration.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/home/Illustration.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 279011\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNrV1iMVNcaaLtrp%2BDfEe%2FHuYhHO1KF%2BXYNJ%2BGieOYVzjzcuEEzizNHDvIQdfXwvGuDAAGIgCM8RoYkOgcENEjwCiGfZOwEyoIM%3D\"}]}\r\ncf-ray: 9cd9ffd9dcfb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 635 x 525, 8-bit/color RGBA, non-interlaced","md5":"2b3755eef9bd1ef29acead10fc1f9a0d","sha1":"b8528484ee20480f291f75c9a546e8e1f47f262b","sha256":"3c084cfbbb579fbc872d6166a101df16237aad9362c49ba1e9ca347d76c9b0f0","sha512":"57b573c3503e16942afc5d4ea607d99d1285b02ba2bb20c75a451be8058ba698ae6c4ff3467099106f4bcc51d626270f45bbd7a7081a0bee1919e8c405dca4fa","ssdeep":"3072:5UAoBVovGW/u0QFssabjHOvJNBgyXPt7NlJZTc10pLHh86QvYh65nnuh4zRbA8+x:5wJW/ciCzl7Ntg10pLqb75nnuKZ+Hp5x","tlshash":"3254238ec4be432d14860b18c0508d75cf4fafbfab62d41eee5b71c5717685f29a9282","first_seen":"2025-06-30T12:31:55.37177Z","last_seen":"2026-05-09T07:39:24.436761Z","times_seen":38,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/bnb.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/bnb.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTztGU3NLkM1TqL2W1fMUaKoQTGLBoPUj%2BV2%2Fl278aW%2FsUB5pZvWyKgDXY5vW2rVgD4nkj08kAj9oHODiTggpA5tsHujCRdZMlg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd008be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"faad1f8773e47415f372e48416f460e9","sha1":"9e1e10f8554a43fe3e9e870b7409636370af597b","sha256":"1e3f4850b5e106283bab874805118c2bc246923e52ac418009c0af133f5af545","sha512":"55966d0ca64f991e97ed14bcaced6a7ee4b7667e4cb33f308c7c92794e5116ab2a86be72528f880a111e593e6c01cc56b00e40cf786768de954a1184b7647154","ssdeep":"","tlshash":"863101ac41b6cc3de23583f409b052d816e6ac77f100347cb4e59b52bd24ad72a85ede","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-06-01T08:48:29.194541Z","times_seen":342,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/npm/swiper%409/swiper-bundle.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTHmDrPrsPgCHaz6a51l47b1uTrvZz6Vy3Ey%2FA5GrhkmINO4ogCOJJ5IuTBSRa2kRVIQH8FdcO4ctoo3g4sTuL1K20Lun4MpED0%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d258be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-06-04T21:04:51.579976Z","times_seen":600,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/news.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/news.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHpQjkfm7VIAJEGds0%2FYJe0kJMhT4npO0EFvmY%2B2vQU7XgAzx%2B0YEbXi4T8DusJwOrR6QBltIZkBYxsWP%2BnsvNJKCTUEgXJIYbg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (700), with no line terminators","md5":"1c5de425fdd767f5563637457072800f","sha1":"fb7895735d2ece4044b494c1e127db9cd560eda5","sha256":"37996a8f2c6254a7c2f161dd1e631aa5de6a4c9a331ce2e519e90013d367eb78","sha512":"c75a66fb0a957c10aba5ca34c9dcb6eb24c8f4cd8199b6fedd1c3cb14d4826137e13c395e4fea509936f9ef0ac3819a7970411e3ea9da5b20c5f8783a345f9b9","ssdeep":"","tlshash":"2b0140584b54239fb12b86e5d3d385dc817ac1a3b7420e9fd6e96cb2830502c3432a98","first_seen":"2023-07-07T00:41:00Z","last_seen":"2026-06-01T08:48:29.159559Z","times_seen":149,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/choose.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/choose.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSQYyKd%2BwCMC7Pmqf%2FKApOuS1ebl6aQ2OyG0LhXV0BqYKYWtAko3wsLKa3xyIlAMqY0TckCLkXYQwarvGPEViElA8wzeCg1iUQg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcf68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8d66d7c6c8a1c19f66c12b39561c1d6f","sha1":"14a54b80a151582b11f58f64465ac74a9e8da536","sha256":"4e8e70c5c1183348097da327696aeaf7ca84fcc0068ae553be5b69bab9e76bd2","sha512":"0a7a1d157754003990d867dbb1b387811182c92410f37930ef5c2e2c018e8997a68773a1acaefd49c8df551567742a64bde13c93ee2cbd512452229de5f4db74","ssdeep":"","tlshash":"6e51f3bb0920210cb41b645c6be52b49337c8113964df9e9bec3544cdfca9d19573a9e","first_seen":"2025-06-30T12:31:55.355669Z","last_seen":"2026-05-09T07:39:24.414127Z","times_seen":38,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/btc.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/btc.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPZazHCGImPI%2FR99IJ%2FqaI99VGjgBy0QK7zA0CPAT3mGnWkO5XZHfwnYH4SYBTQzNuapC%2BKWZ4wBQpce4N0UQ1uTqcLF%2FSedG9w%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcfc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e959a957e7815d3c97ffcfa927a6ac3","sha1":"be033b9cbd925aaab0b6244f715c5d3f34d1cd5e","sha256":"af4022bb60633db1a667a52e1746eeefe6384b81825b13155a93b47f88cdc3ed","sha512":"244d59641af74b45d0b9079ccf7a3f9c241e8888a6fb15373140a730cb21f7fddcb356ccac93eb91e1c854e848f7be1ae92987176e5924ac8bd90d456014b658","ssdeep":"","tlshash":"7671b799e3fd84d6e31c8564ede1250a875c609342040d08bead5ca4efa25d2f77bb98","first_seen":"2023-10-25T05:58:22Z","last_seen":"2026-06-01T08:48:29.181828Z","times_seen":368,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/ltc.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/ltc.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATvMNue5r3oysoVQs5BviunF1H4BQvN%2BDHSQ3V%2FKaqCPzWG4xwm1mu6VZIDdaAjidxESIgTgKuY1tS2NzUMSutIcGivoYKE1yL8%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcfe8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1357667ba2495b5b9b624e477f83c544","sha1":"841592b39e45a36429a8d5a054c08e5c7c934a6c","sha256":"19a2412000c4b36f27b784a6f0ae5d074945770bcb9d3433aa8e9cf26a4cb39c","sha512":"67f23837d53730f260685d63066c729ba7cc5433133643d58f5d6af5420fdf8622a5a6d77d2e57e429914848a8ec3d906c5dbd35ca78e327afb134e9f920d8f4","ssdeep":"","tlshash":"fc01d05d4780dc7d6591866443b461d16376b047c78149f4dceb267bf6058d05254bac","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-06-01T08:48:29.190458Z","times_seen":343,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/usdt.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdt.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CAlQeW0L8ddNxzdlMOtw2L8TDOGk9U%2BjmwYBKrvFdu3F1aUY0LKzfoBRNIX5S8VBi32S900PQMwBOu76q%2BHuKvw7hzKKuuDL%2FA%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd018be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eac1f7bb15967c89034b440b095ad74c","sha1":"5da1c6617fab973a2501cf6c01e083bf45aa29fb","sha256":"e0636ccbdd55d437a62c09b1355f2f018614418dc9b28d223bb2820fcfd88765","sha512":"d1aa4e69ae573e30c08d4337a91e4602eadadc28f3ef2b08e0776c156329a0eb3dcc7abe9384c4718b5c12a9d0c32c6b3455178d724b36ece1b716f0cb3130c4","ssdeep":"","tlshash":"1d019c794145c95cf51085a9db99310425b871fad2f258b8f9da12127c41cf60834fb6","first_seen":"2023-06-29T23:08:25Z","last_seen":"2026-06-04T03:38:38.31529Z","times_seen":400,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inv-cx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192949\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T04:25:32.749509Z","times_seen":5073,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":156,"dns":1,"connect":38,"send":0,"wait":11,"receive":2,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T05:00:00.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 05:00:00 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en-US\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aT09ZG6Y85OmQWuzqKDtBnisvkTE3pn5DIqTcUmlZF6GYFs894lCJmW%2FRbVUI9J1EUZZqde%2F8gpKAtsgKN4%2FDjhJLG%2FHb%2F2%2B0Ew%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ffd7df26c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241190,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2638), with CRLF line terminators","md5":"e89c02ab50d509010ea74ddfa9473a92","sha1":"89fbc57ce8306943b754cfcb5c8f5dcc414ad611","sha256":"5419ffb57837d2e1e30b40ed4c6c243364e9c7b3b39f954907de458ed5c5805d","sha512":"128193aa56ef160551ecfd995835fd12846b2ea9493f422e8ded7f02481fcc958b814db2e623178b59cd851b80cd65e794e0e5af43590771b21e2b806f15c03f","ssdeep":"1536:/pE3NDqDDDxmDdDNDHDkfDNDVD9ZKMVR8zKEKMVR8zK/7BL+Wx7D+Oa7BL+Wx7DY:rFoy/ZRZ4L","tlshash":"9a34b4b0a3c8a1e5e15293f8d63959b5fd2728e7aa12c14973ec2e839f7141d8c57c83","first_seen":"2026-02-14T05:00:24.769989Z","last_seen":"2026-02-14T05:00:24.769989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":26,"dns":14,"connect":1,"send":0,"wait":118,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/calculator.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/calculator.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRmWPYPenCSvaybaph8QycTWRsY85We7lbtg5rt5xcz20vqpg2Jg35s74CKNpfZbe%2FCOFRYugFEVLWL4xrRGAvCd1BqUSU%2BO2%2BQ%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccee8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6349), with no line terminators","md5":"3fc0402fcc4fd6d1f9e6499181698b03","sha1":"61fa5f2d3f41289de810c170f5eb76226f312781","sha256":"c44c0d7deb0e4ccb7b3d68e35474a2d01a700c3b877dcdd64d46c2d3fcb4273a","sha512":"802942f16b3b4134d131314d40c041ca8ee7ffd73e8271d2140c17242af91cdc2072b5003f8999c11fed97d6649b0103b011db7368839ff943b91442963152e8","ssdeep":"96:Ze38f87W0+nRjy7Qhf2a/22hg2VlRkkDkZccM+hFbt:Q8f87WjRD2au2e2fnHJ+T5","tlshash":"3ad1443324151928b527dea227f919dd718cc263e11327f9f8a1a96ad3c33c705f2e4a","first_seen":"2023-07-07T00:41:00Z","last_seen":"2026-06-01T08:48:29.157058Z","times_seen":148,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/home.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/home.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1fwETZjoF%2BT5omRLVSuiCcZkaL%2FWiRBiIrmbGQw76pwzvNcotc%2F3ERVal%2FI1pjeJx34s5%2By%2Bwn9KOalMSSxIIxuaFWGDLvJKxM%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcf88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0390396d19413a826f3a2953bfa85047","sha1":"677ba28044070e499b6e6d667c48921bb6f486a3","sha256":"e9ae569203cd1dca93689b27eb7acc120d17b49cd8a7743a3b162710159c5efa","sha512":"680b605f4542c70aac31fe66b7280cf922c3556093e63a6f2e3ad87821a1b3a623e863f974506691a093115e37fd7e9f6641996315c0dd7b8ae3fa60a6a8ec4f","ssdeep":"96:jCN/A5/MvtKXBTsYe92FdJVnzPE3FvX3gFvX3pX3NCzXyESawfhsrUJMlSbYllJ:+lU2sXtpFTVnwFvgFvptCzXyLawfhsrB","tlshash":"7ab121976bb2260c795b9168b7da0764773cc003511eedf9bad1194cdfc01e0b7a278a","first_seen":"2025-06-30T12:31:55.369955Z","last_seen":"2026-05-09T07:39:24.425124Z","times_seen":38,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/usdc.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdc.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MS%2BYWhrIp%2FO0ry8ZjExgux6NfBo85e%2FR3U7GfzySQY0E2P1ae%2BvIU9vD%2Fwl67Dfc9FoUaZNilYaBvziY38P5Huk9ZNhAVPJ5gfc%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd028be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94ec50bf272c2ca70d2741d9794652b9","sha1":"984e715c5968afbe271b777a11cbbf1434933215","sha256":"a59ffcad23c4de45b0389620bf9bf14811e606e22bbf2f674b00baaabeed6500","sha512":"c922eef8d1002995de7e76e08adbd7245c23bf2eb411ae7df1776423503b442a9838cd471eeb00753ad79b80742eaf65d7fd8f3232682f2956a58c6846ee3b79","ssdeep":"","tlshash":"483110068204dabdfed6062cb27038c476f1a99ff271d0e8aa6f1057d08cde0759c6e9","first_seen":"2023-11-19T01:14:23Z","last_seen":"2026-06-01T08:48:29.133806Z","times_seen":318,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/busd.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/busd.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfbidFEn%2FTeIPCfMTfMIJkBn%2BHv%2F7F2mUHUGpSMp0N73h7UODHnnxZ8ccagQ9oUfRsapzK0mldAda21HExxXHn5LCHrF9BhYlbM%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd038be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e18c9a55ae92ba734105e2ebdea06679","sha1":"0c5927bbf67033788a0829b817e8ba735da3b026","sha256":"23a5afc32f0a882ae287456596c37ef02183563af26c57619e91c66a90cfef21","sha512":"0aa09904c5489dd182148d429ba9497aacccb895b6c7e7f07b77e3dfcbc2af8bb3a02f7f5a3ddbaaa7eeff9b5659193fe3724b0003c20e78ab0e7b7b00529d16","ssdeep":"","tlshash":"6d119e24d204aceff50dcf4483f0aad12e626ca382544c7cdef81a79d755c570c5529d","first_seen":"2023-11-15T03:06:45Z","last_seen":"2026-06-01T08:48:29.183024Z","times_seen":347,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/bch.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/bch.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7fqwLttDWkkkQzBnJ7vg%2BnNdDQAxQ1ZySP6vxUBmyFXV7X6vtcIr9RWUBpRir%2BalbpKiK1zO9VUeauEfUYD1xOF4SAIJqlq%2Bvk%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dd068be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-06-04T20:50:37.157611Z","times_seen":815,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/brands/brand1.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/brands/brand1.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 6535\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaSe1hup4yUkydozxwhFL616HEGMS0uyw%2FT%2BNVDwn911%2F4jKk4eD31yorO3DalZyBHDlS127bh4VVZe03nE8HH3TGgjfUBx6LdE%3D\"}]}\r\ncf-ray: 9cd9ffda3d1f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 40, 8-bit/color RGBA, non-interlaced","md5":"ba147c01b9f46cbec387832502920bd2","sha1":"6261e5db52043eec330960b9970d5b29b780f80b","sha256":"fbb0f6fa5a619ba3004258830113951e4ebe7943055db2961d92e1463b4c669b","sha512":"69d13676030c8cf8641d115cb87b511bc01e0bd99e55591f90c53c11bc92423c8e6617dfaa128c6752983ed9ee60239417bd8d7aa49e5afc5d98d01900171c73","ssdeep":"192:SS6wLr7bqsvzvAjIX5eGW9uTOuYJ/7tqT:t/LOsvzJgGlVStqT","tlshash":"52d17ce5268044bb4cacecb530a9bff7a4757b26209871bca48616fc58d27f081310bb","first_seen":"2025-06-30T12:31:55.376774Z","last_seen":"2026-05-09T07:39:24.427085Z","times_seen":38,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/brands/brand3.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/brands/brand3.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 7686\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RPc3wo3n6u1BasN7VJjDHSAMtP7lHXfn9utxldC70AE8r4K3UB8oO5XWApcZliQGo1lwoVEdT4Q9cBS6s%2BbFXQsypAGPCi7AZI%3D\"}]}\r\ncf-ray: 9cd9ffda3d208be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 273 x 38, 8-bit/color RGBA, non-interlaced","md5":"058f0ed46bb4c79b1dd8549c18731077","sha1":"442a0c0160731e8de4dcfb0605108cdf1c63c1c0","sha256":"d09d28a30e6fb3ddd7d8726bb4ff0476dd6dad96ae31b7fff8201a8b75926a43","sha512":"6064bfe447b3ccf81bd361c51ff1052fe26e386b1dc7908a6656bfa8657e6a6ccbc0c0ae54af376b7744ced614f7b444bbe1b7f512c4a1eecdcccc4f0d5f4b25","ssdeep":"192:iSzHGjYhlKc1+LX327vHvNlS87nc5psvabpyl:9zmjYPN+YvNfc5mvabIl","tlshash":"5ff1bf6fbfb386be6ea663a223931c0e1871704964505e74d90c4c0c7237c7a16687af","first_seen":"2025-06-30T12:31:55.410903Z","last_seen":"2026-05-09T07:39:24.439326Z","times_seen":38,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/header.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/header.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXOJwRIhISrJPyqKQzdc4Bgh8Z2uWQ6g7WDY7W0W4xOrCh7g%2BxfqAOKhphAc4jJopaT6%2FOaNWLnR2TtskI4AbkO3w%2B%2BkLnSqfyY%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9cced8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de6df89dfd36d366a98f4b3b0d59b7e4","sha1":"60a00e628bc51f848bdb1a6e363f82bc6120f5df","sha256":"0011b229841a5a96ce78e71373096c56f74a7e4db3f2fb1589cf64d68d89dfb1","sha512":"85564f3463b21ed208f521593b25f29c0e4c178c288c9f419700e460826d5d2ed2c85f38caac2ef321f7b177923b48cdd9d8d3fa7a3329a1a605798e75af2880","ssdeep":"96:P1SClCfSa/YhpKHBCyCEEqnCEXMFGUHN1A1V1sKr+PoX57+CftY48XyEi0XyY:DYNH0R1hFGUHN2LeKr+PoX579qPXy0Xt","tlshash":"22b1cc5a5b121524b817985ad7a01f1273b9e007510ff9f63bc3941ecfc768adbe22ca","first_seen":"2025-06-30T12:31:55.386634Z","last_seen":"2026-05-09T07:39:24.408234Z","times_seen":38,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/company.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/company.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Be5GF%2Bvnk5uLd8vYyCM2AQoftOMRC0HxFY9FZ1uSW%2BMSL15tqjS25gqemW3iQAQfh24ZQMhGFqMDwdgI2wYI1wXdNSzJf4iUNRY%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83a1605a720901443ccfa26826b762c9","sha1":"24e9465c6027c39aeecc1bd005b24df9007987ac","sha256":"4a9681fdd8660988ed0a53c7982cc2dd9e50cfb1a890a2ff0ea433d0e5ba4a78","sha512":"305523080dec988b93723574e8e30733e463d4a9670f5b77e52dafab4eca650e86737c2445d9ed5ab76f8cad1d7eb965e91d4574da63f004a7a1139347e7ad62","ssdeep":"","tlshash":"8d21a4d70531310cb937e86447e61765a2789027d80af9ddb9c274cd4fc9acc94f3649","first_seen":"2025-06-30T12:31:55.388424Z","last_seen":"2026-05-09T07:39:24.406324Z","times_seen":38,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/eth.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/eth.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXkvWgw7QKUei%2BWrb8lp6rZrxs9Dhi3mtPN8AUf%2BGZ%2B29JgNBR%2FR6tnvMwjWapmJJtbg7JZ5lB2Y6BgLz5w9K2xM9zM%2FXbOrLoU%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcfd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"122a686a52bc4e03895a7edac4ec209b","sha1":"6c415cb1ad3d376f03abeaff5d7dc89de7bc8bba","sha256":"68ca594162c73854fa960caf63f068a26562f6f7efb873825caaf4fafdfad1fb","sha512":"4f7136ee8e07c6dc13132a25d51a3cdc7ee6e6c3be8fc3d1318388bcb727deff12a5e61947a9ccb483e8561ad684551d0f1e13244ef29f29a3be9a73429505c3","ssdeep":"","tlshash":"0c11b129155a657b79218384237a82d333b250ebdf401af884f12d7fe206c1946cd7e8","first_seen":"2024-08-20T12:48:50.787004Z","last_seen":"2026-05-09T07:39:24.437568Z","times_seen":119,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/js/jquery-3.4.1.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mEX8pfJCO%2BiVPhMeyj6%2Bcd%2Bur%2BUF%2FYEIOxbG%2BG%2Bi5I75mA%2FdcP1%2BW%2Bw%2FBbecqsjFWzaUlKSWikozfpyPhSj6D762eEClDNqGa0%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d228be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-07T01:13:10.263952Z","times_seen":5115,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/app.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/js/app.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vckKZMFkJklZIJ9X3r2FpU96%2BzAokuYZV1dms7f5oX%2BjWz5%2FuADKwAa%2FHdr5MjMlfR4ElRgS2tKCLEbcl8yrxjKTWyhhox3K9yo%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d268be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (488), with no line terminators","md5":"632bdd284f17fcd40eb5a0f445472e00","sha1":"7fc40a9cb81f873ee8b6ba04d30161a8d48dbc60","sha256":"87dbae4c0439ab8bf5607748f3dd35b7b138cfdcab2efc94a1bbf6773ed0f131","sha512":"c81b3463d8fface28b4fdc2f198b561ccbd5099935bdfff005cbf6e2ae5df6214e1764abc32be18285747ffd5770bcc05a2a3ae1ff61e5b069d430ea4c066765","ssdeep":"","tlshash":"31f00ecca80191bc03bb40c0226fd1c87c906832e0a1d1d501f7f34804941e512b5e6c","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196152Z","times_seen":182,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/news.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/js/news.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQ6ggc4PknNseyWSaiBpQuu7c6K0P0i6GEOaBHGTiaFNyaG%2BuB4gjbhNKrrFjfbclzML%2Bp%2F5V7jsJ0OdUyvZRFqhhLmEUg8YZys%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d278be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"1c640d083b2dc81a6f9fbde817552e97","sha1":"ab789ac8a70af52dbeaf56b606d6914295a71eac","sha256":"3501416396bd8a484e2b3ddbec46e6cc515d68ac7a42bbc733d52bfa2a4e2329","sha512":"94c0d460ba6b4bff1419953fd2a6b828d39deb51363d774e632bd7ebe200d60efab1e8a91b5b503fc72f9f496509d90eaee206d736441e0b18f51baf1c311fc8","ssdeep":"","tlshash":"15c0805d1075718403a2cafe5474ca42c573013797d7493fcaf404f984ee5580afbb98","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.191352Z","times_seen":150,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/cryptocurrencies.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/js/cryptocurrencies.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FpHW4gylQ%2B9A7zscs35Ra7S0eDg5yOlF9YXgEilfkvwY5FuSrmBlpoT7QVWrGix8j4Yhz%2FMg1Yj8y5r7Z1JMMqWfdeUNgL9dVU%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d298be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (749), with no line terminators","md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/account/accoun1.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/account/accoun1.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/landings/css/account.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 279776\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzoJ85jHCJpBq4gaPmN80zOY%2BJJVhmKsOiwGhV3ERN5RpmCiiPa1GF%2F3EIKYWpsnJKUnN6uw%2Bf08Cl4wdTzqFQHfcCSszLK0ibw%3D\"}]}\r\ncf-ray: 9cd9ffdc0d5b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 575 x 537, 8-bit/color RGBA, non-interlaced","md5":"b280443f9861021283e9e1bc37a8fe69","sha1":"0f227b97d3a8bb6330c40d936b45571706ae1254","sha256":"d7b3c89df16ab198223750f340bbfec57bf80a23a82e3ac0d2d492b253935737","sha512":"792ab11a4375ff16ad722af3e4b6efe03e10bc3b6a94a1df05706455a069d9ac13704ae727f9989c6de585ee0cb6ff5ce635feb89920aa7544104ab395a19245","ssdeep":"6144:bYMmB+cdQ04Qf0aNzWZb3YYrKRzrM/BivP:bYMmOBhLYp+ivP","tlshash":"ba5423a244fbcc311ae44898360099ff08a199519caf7354ebfb49c5ca411db463bafb","first_seen":"2025-06-30T12:31:55.420515Z","last_seen":"2026-05-09T07:39:24.404216Z","times_seen":38,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":67,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 05:00:01 GMT\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27832,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"84a845ffcaa69d6a99ff99a71a782517","sha1":"e8e232d0a8bc6088736bfbf3b448c83a11779b61","sha256":"31a19970c67af915788641d912ed51f8d5e483c80243054d17942c87bd810e42","sha512":"34ad58f2ad8a85ec7107c8cf9ee08c9b430983e7cbe1e1ba756fcc9d275887120397fa3e0783991fb333bb80669d33d42eb7a83742aae72d8eb10656f3a084f5","ssdeep":"192:RyCyzqOyWbqGIwVIyMLyiyjyzqnyWbqGIwV1yMqyRycyzqAyWbqGIwVWyMZy4yFN:luqYFPqYDwqYNxqY3iqY1jqYTkqYt","tlshash":"21c240a1041714009b8728e212cdbf75ff0f9390b1589075a7fe8b97ee8edd592a836d","first_seen":"2025-09-11T16:42:45.120531Z","last_seen":"2026-06-01T08:48:29.192195Z","times_seen":149,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":188,"dns":0,"connect":21,"send":0,"wait":34,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/trading.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/trading.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbvlnFFZIip3wF4fgkSZKDgVUZu661ON%2FomOjMTAQD0owrXAm9DVDx96CaWZwNz0vw%2FnFA7rKHG0UICHQkQ2I4dOaTdld%2BZyhvw%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0f8f0b01b977bf69c4f79390d1c174c","sha1":"cee288d27b0d006b272e3f10d9536325f3c9f35c","sha256":"2160ef6f6d859915ba3ccc27ffeacbd946e346d0d1874cd48d3894d4a5584712","sha512":"183f777660f4d36b816030d701e4366374032d17e242826e112dfd0e2db7a5fc9961ad3920426e2ae781bbc98dd823192eb4e7e1244cb0a90505c2bc4e410eb5","ssdeep":"","tlshash":"60610dd30664ba093943b868364517a1b36c5053c24ffaed6fc2248ccec69c4d9b37ad","first_seen":"2025-06-30T12:31:55.394914Z","last_seen":"2026-05-09T07:39:24.421587Z","times_seen":38,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/account.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/account.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8TrJC%2FNoaoep34cDTvpTcWEJDp2Q3VZo6mFXmzAuj%2ByQqhJn1ZVNp5S1NADAf61xsXbSu2UQUqrDEjYIQvTY6fD21VgfX0k%2BXA%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1851,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e87d1bc18b937963bec54e954fbbc677","sha1":"46306c939e83fb22903cd56cae5cc6f638fed61d","sha256":"6fc57e8b497af00c9248872817f97932896df90d7ddc2f5ede4d67106ae463ce","sha512":"73c4967d6d7f71f4238f46d41e71f61ff6fbda24cbddd25123bc8dc5c4a18c450c12d4c7e3443893bdfc2b5f237a059f6ac13d7e0b413dc9ec9c1983933ac015","ssdeep":"","tlshash":"aa31df9696a42d8c3927e0ecb4722759937c4002d20eed7c7af531ec7fc62e18133a95","first_seen":"2025-06-30T12:31:55.396339Z","last_seen":"2026-05-09T07:39:24.407193Z","times_seen":38,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/trade.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/trade.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfXJOoHT7Df9Ku5ejyjJnrcnrMkEY3Zt33TBg%2Bz7ZQGGbejAQflE3mKYar%2FLHp4ybD8ZXNmT923FRYqAY79s2q6Yt28w6ouLSRs%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcf78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e385c0229e0866945800a8e50b70a611","sha1":"dd11d3c2038290fc6d1e9d142dfa43c79895eb63","sha256":"812ced114ca94fdafad8cc2a604ae8390d7004b1c419a7c794ee945779482382","sha512":"56c45648f2c1715d6a2669a9fd664054b4827427db4cf7846ef9fd89a1ebb049b8fc83d72358222f0be986473a465b7963dd8eab8e9c3cce4257560928ff69a6","ssdeep":"","tlshash":"8461cca35970b7047497a44cbaa51b4073aca003e14ffaf46bc2250cdfc8ad1c67369e","first_seen":"2025-06-30T12:31:55.412121Z","last_seen":"2026-05-09T07:39:24.405076Z","times_seen":38,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/img/cryptoicons/trx.svg","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/img/cryptoicons/trx.svg HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpuIBplUgsHKEfOrcSnOYgUbzS3MVuBHeblkD0ZTUyIRtb3%2F%2BA8x0seUBMY6M9Ovz1EsLtYmJA2EYluH4QOfU6U%2BytWtWh2Hhfo%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcff8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1d0e43489bbca2afd7945d6ce212f4d","sha1":"1d386aed1d936e5c442dc34796bf6ea72eab8a15","sha256":"b9a9f2e5f95168b5b1cfeec951f2fa88779830be1c830de2a7764d254620d652","sha512":"eb3d241a3aea7878c1c2d62b1ad6d6ab0fa561c0557a11cb835961addc1a6b668143fce4ea7dc0a660fcf5423e8145a144a253d16c1bb897fdc6a4cb166b28ab","ssdeep":"","tlshash":"3d21115d4204dfbdac52866967b0adc573b2548ae530ead8acba147fe81c4835288b0d","first_seen":"2024-08-20T12:48:50.792117Z","last_seen":"2026-05-09T07:39:24.411645Z","times_seen":114,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/trade/tr2.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/trade/tr2.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 39321\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aA5N6jiIj0wPUgKEMomCag5WicB%2B%2Bjh53V0EKQ%2Bs5JWOJ67hwHwckgh9ggNsqIEJL7F0u%2F%2BuAVfglSOOAPn8UsbZ6O3inaFgCH4%3D\"}]}\r\ncf-ray: 9cd9ffd9ed088be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"25befd53afd4ca582404c4e05a5949e0","sha1":"f2dc47455fb726f8ba89561e6418168471fc045e","sha256":"0727acb620b0f163071a751bdc3188726d6a1a5ea94509334109e1c3b8e5ec19","sha512":"7f71b070d8b1da435e370d7d3791290fdaf53ed7c7d0741165d93c30069c8d6871c884d1dfebf42adb93d8d556b7de8f6b0244564631612b44c2b7cc2e42b7dd","ssdeep":"768:7uTDY+kzUofaunp9St5dWBjgfu1YkGxcPNS54EVu9EB8JR6H:yTDYDzU2pw5dW2IYpxCi41uB8JRu","tlshash":"e503f15c7b831f663cd682e351865c21223f99bc9801192dcc1417bef2eef46655ee42","first_seen":"2025-06-30T12:31:55.418309Z","last_seen":"2026-05-09T07:39:24.402375Z","times_seen":38,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/trade/tr3.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/trade/tr3.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 39723\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0E%2FUuR%2BzpYqeiIaB51rdizApW4iMP3fl1DpMMqR8ZjdOI5IIUgnRcy5aBjuatBkr6BZLP%2BbShV1kR69Uk18HMgpY18gAMGzlJNI%3D\"}]}\r\ncf-ray: 9cd9ffd9ed0a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"bb337519443573106a2e59b04965315f","sha1":"767248549e0567c29c549d0c8a1bf399d77529b0","sha256":"fed83eff2d1232f6be9ed8bc79b320ed8d6b98789efd0918d8f1de5c4100e895","sha512":"2b953d8767e910101817889392645ca807aec91403b30172b4a5a385e659dc0f7a8a07c7487fb20f29c0cb61e7752dbcab008f99f994d34f9dcf721171585df3","ssdeep":"768:tIDdPnjxgFfJoZ+vT6TOlbjB4qaucn81FB9qYBHs5XtIsmUxYK1:tydP9co7Olbjmq1cn8DqYp118R","tlshash":"9503e11fdaf66f99b8879837c52fae9efe0c0b878991f0456424e5016d26df001c7e0a","first_seen":"2025-06-30T12:31:55.4078Z","last_seen":"2026-05-09T07:39:24.410159Z","times_seen":38,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/brands/brand4.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/brands/brand4.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 10517\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhe2VdYcI%2FSjGmF6%2FhaYgIXu4JvYZoAZmL6l8S5SfkU4OSv%2FnjEn%2BXoTKhU1k1dGFzwSxsXNSfYcQ%2FUu%2BVVoGs%2F7CuyZ5f1gM3Y%3D\"}]}\r\ncf-ray: 9cd9ffda3d218be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 40, 8-bit/color RGBA, non-interlaced","md5":"c8fcbcac62f1a4ff8aafd52a155ac82a","sha1":"5ee10030f924e4d06e611fdc4bfd88e5cad4b061","sha256":"1ebde94e73bce4362620979b9a0ae941171d39fc7043285e18e8289f1a9fda2d","sha512":"2bf9c72a63ba972f7bbcb72f7441f6ab47d8c7f5f19d149e70ff1f8054be133098b1c4eed6198a96efad4232d030e921b2a949f010c0d1e67e1c60428734b600","ssdeep":"192:hSRp//61pin9NsLhL7ATKfarfCjMnMZmo70+txjfcWUCl8EUTDFxuHYj:IvtvsLhvUr2T7nUCUTh/","tlshash":"3222be18bc3816ea4d77e18ce031ff848c944a24726653916bd86deef63b4e2c65c1a1","first_seen":"2025-06-30T12:31:55.368106Z","last_seen":"2026-05-09T07:39:24.424025Z","times_seen":38,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/global.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/global.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUmZ9e54665Y3umz5X%2FwlZ1%2ByAtsYjdvCdYqPCmSnn0%2BwmSBoRsT0p8SMv1lt6TkMuXr%2BSuB1lnUSFNqr64z65CAcT42HzihfIc%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9cceb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"50533e1a0401a2a2921900752c2190fa","sha1":"9baaf23f887068b3558a49f998f1fc2a03bab16e","sha256":"3e6ef13bcb06dce69ad13735ef58fef9609c4e91b988eef1e06b6dabc5b9f684","sha512":"71360bbf973ffc1b09f796ae56a2ed6bf9dca117411c86558e5e10a00926a541d7f94fc3f9c48bf1b2f753573b3d91731602017b70bec56688d58b7790c4fb21","ssdeep":"","tlshash":"3121b9b7aaf00a55616b8918a389c79833990533460ccefcfef469b8db8178501e03ad","first_seen":"2025-06-30T12:31:55.384853Z","last_seen":"2026-05-09T07:39:24.426553Z","times_seen":38,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/footer.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/footer.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRXsW4jNv6vwY6Kvlqp5Keb4u2wGm%2BJWK%2BdwdfJfeDW41qK8uxEoMFASHhWNeeJZ%2F59gQkGtFD6PtqixerRSQNCrdU1nJjCbu8k%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4370,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cd6ecd5ef8f29f2184ce1806b9911b6d","sha1":"d10b60760c321a0c2f9cb75974ad5f6f794e9278","sha256":"912dcb30cea7d3ba67d77ffc3d97a578f80d0cb46f477f9176f81df9c180fd72","sha512":"419a0c64bf9d75d82806fc41511c11ab958cd5d6fb247ae2e301f20557f5653d250dc333fdd0a04efd4b26a322076a1abe5461e0624c4513d737a4519f1f3c40","ssdeep":"48:wPa8q8jXRP8HCMSFXFgIcMqLzcAlMlCAbFBE9PFl3HurysQIaXPZPAPqL9oa9a:wC8vjXpwC791gpa42FBE1F1fPVwgJa","tlshash":"8991babf76b5051868576850e7972ba563bcc423410efaf1bdd1620ccfcb2c99d9228e","first_seen":"2025-06-30T12:31:55.38099Z","last_seen":"2026-05-09T07:39:24.409119Z","times_seen":38,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/home/financial_freedom.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/home/financial_freedom.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 449073\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XG%2BMMJlTB7VEDvcUaRXVZ1uhBxzVUiXP7VQRNWJjnLk7aZvu0DKLXP%2FcfdtSN%2Bn3A17PounnoWgWDDP46JYBAvi35n86gryNIw%3D\"}]}\r\ncf-ray: 9cd9ffd9ed078be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 636, 8-bit/color RGBA, non-interlaced","md5":"04451de21f648a95bf2eb1dbe2f91f89","sha1":"69478a540544a6f6cc5256c2afca6655baafaebc","sha256":"cefb2b893e63a2c2bcf04f9912050e8a6ccd0d003b6c69b73d23798ace290524","sha512":"17d08796cbaec23971c64317f896d6582bb624a38f7078dbf62524aa43bf7ec7237fa9f3d68c30a9a0abe5158c73eef66aa291bc9d81f8b4ddebb5797a2ffbcf","ssdeep":"12288:33dwLlETQIVFT5osr7WQo0U7gCa5iLEWW:3NwL+QICsWrgCMiLpW","tlshash":"5ba4233e358f7493f2aff86ba79fd3c21a8ecdab4147bd0651e5452ea65cac08401706","first_seen":"2025-06-30T12:31:55.398779Z","last_seen":"2026-05-09T07:39:24.415505Z","times_seen":38,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/brands/brand2.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/brands/brand2.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 4876\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZwBzxMBl%2B1jNowi4EoSQ%2BB%2BjzVwf1Tv8VGYjC2etEN9EKHIw8iNtXOCVjEuMZqDTpFZ99c5TX69GBZTQcJdwgUzstVxU5EQu54%3D\"}]}\r\ncf-ray: 9cd9ffda3d1e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 148 x 46, 8-bit/color RGBA, non-interlaced","md5":"30472718e50537c3c9bf67707e0fa50a","sha1":"1c78a594073efd3b1ffff96c561a571b6fbea4fb","sha256":"2b6a5ce4e6c35ced206ef5aa4a7a32e413a01a0d9f20650b8e91d03fee6e6a48","sha512":"bf9ce8a08374c55aa1dd2b0bdeccf72a949c35a616324e58a3e5edd929375e142048a8e3dc7634d770e2583206aac6deb1daebe213549e49890d76bb6fd28ba0","ssdeep":"96:LS46ebv8d3TP4tVO4bupiiajt1vUSRl6/KIg04rizzRM3Ol:LS4ns3TPWobY7ciEOezzik","tlshash":"19a18e6ed3618e668cc3daff768aa31a70a1c743d531e9446b3348c03039d8d262935b","first_seen":"2025-06-30T12:31:55.413476Z","last_seen":"2026-05-09T07:39:24.403187Z","times_seen":38,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/js/app.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/js/app.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPfxwTgUoyLsMTTEJep0%2Fn62RL4JvwiCq5FsydDgcCJVm9q7bzn08iTB58h0loGCwaEH3mKf%2Fi87nuoaXvgFpphTplGPSsrz9HQ%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d238be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3615), with no line terminators","md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.195384Z","times_seen":434,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/js/header.min.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/js/header.min.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1lKXlzZ29%2Bjd6UCIXsankLo2lo0T030YGbfbR%2Bk9yLyhpcExGhvXEsJvzxlNTtuFtEk5pgopeMz1LkL65EvUIq6Twa9cKIeW1A%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d288be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (563), with no line terminators","md5":"63f1eb758c539563a116fd6205f2cbf3","sha1":"fbaf0ea4381ca7def60922205a42f6372afe0fcf","sha256":"4cf4cf24c46ef18a23275d60700a827e4106aa462659f46da1afc3807e8e33ff","sha512":"d138c6538254710cf342359349a96f1fe0669e444bc94f8bc3faede81c88c0c9240f7426c153788610d47c1ec99b98ede8956d3a163a5cb95f1aef9d9ce26cfe","ssdeep":"","tlshash":"41f0c269470c657a01a20ddbe7e1cee06e1058d7d440247215a5cd8f4be9ce2d2a03f2","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196831Z","times_seen":184,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/normalize.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/normalize.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXbL7HVd6dUA4Z9rhd9W1LwH3wiK7u1YJ1S5f6AMRsllIzCMyGAT4orlI%2FTr6na%2FC8MUdHYAFfkIgRUbveHg4zAehfYn%2BXiERB4%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccea8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1947), with no line terminators","md5":"515193e2d064be1543fd99da0c13a25f","sha1":"101babf3b2d5cd9366d1403a527138311bb10bed","sha256":"56bf1a266b6d0ec11ff9faa9c123022ad85186c48aafdbf84a6aa4ca95579d1e","sha512":"3c686599ba983096ab2ee882d9da6411c138bf27bddca58ae884963899ee827f42626b7c4e5a7790704f822cd2fc7691178248ef9914072d390ee52c6d8862e8","ssdeep":"","tlshash":"c7410eb307402b24a773cc262ada3f5835206433c552b6ead450ecb5c7ca9666dad78e","first_seen":"2023-04-17T13:49:11Z","last_seen":"2026-06-06T09:48:00.082036Z","times_seen":218,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/brands.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/brands.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2B8TlbB2qZM1XALB6PkJoDhOXP7alC75J8PYOMmy20Nlthq%2B3Zl5bvKIie3DBYZS9tXz8xxR4Jhtl8xY5tinS6v1xJxBMJPNlvI%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9dcfa8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"97b4490508a54f6d89ff62e36a8d62b9","sha1":"869b89773768d22da323beab32eaedfe265195d8","sha256":"54eed0534fabee0a379e97f86c7fbff1e03eb086721a02eb4d01d58b8c285f87","sha512":"a68704f4eb36241cd8504f468a270334b7f1199b00a9dbed25edeebefeb85d549f8794036fb0e82b6da5abbeb57ddc1c2caec927e54fd54b4a3f65225423fe38","ssdeep":"","tlshash":"81c09b970064296d9e56f4642ce405d1f0cd9497d34eadc921f5018c1cdd69ea1f7fe0","first_seen":"2025-06-30T12:31:55.403884Z","last_seen":"2026-05-09T07:39:24.399716Z","times_seen":38,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/trade/lo2.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/trade/lo2.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 27339\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyCLcSXMS5gQJEMSRda%2BXoDrXwd1cw8ce%2BxPLmUYP2I41yzcav%2BlWmyXEnB7Aqjdwg%2F1kaUPwQqoonvrFw6WPZ7fLvW2d8Gqsjs%3D\"}]}\r\ncf-ray: 9cd9ffd9ed098be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"dae3d7afdfbf1cc9b45685e2aa044ebf","sha1":"fd1f259aaf4cc899f11e32849b4f74e89d6461eb","sha256":"909213988ed470bf4d1c02439c460e94cc25b44cacc2ebf2eec52b8085f2f55e","sha512":"85bb833daa4d6a919cec852a866ee3da1490b8ad530c9aa6a7ea0e2f25e7c1376f51db5d0d72f809248b8598d81bffdd468cf58b8d4e6516ffa74a1c18dddd1c","ssdeep":"768:+6jhKKmkQyVe3xQVP2OpqYet5Bx/jDMGab48qdo2R:pxmYuEfGzxsGaNgR","tlshash":"f7c2e13d29f70dab06ef9328395579cb561a390aaa548b1d1e207475cea0ef91e8840f","first_seen":"2025-06-30T12:31:55.365076Z","last_seen":"2026-05-09T07:39:24.4014Z","times_seen":38,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/img/account/accoun2.png","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/img/account/accoun2.png HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/landings/css/account.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\ncontent-length: 372049\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2P4JVtlaaWGVACtATTK1d8ZxOasT4wjuEAAytdC44NOwu7yqh%2B9o53g8C2jOFu%2FVRiwMvW3R%2BsYFsxhlvsUYbX%2FjLORKYlvJ9k%3D\"}]}\r\ncf-ray: 9cd9ffdc0d5c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 561 x 529, 8-bit/color RGBA, non-interlaced","md5":"ca4848893610f30672f5c6a05ba98ad8","sha1":"4cc51b135128701b9e6e5ae4ddb0e4a9ac839c5f","sha256":"26d1f0f031f645805533d00cd1dc1843f627f541c8a23efe37ab33918670fa7a","sha512":"0aa3423921d92e7fd45bea866ec9109f420fd8e7cdfc629602b88d70e690bcadfd0be4acb061cacfd0521e3a99f56f803c7a203675dfb56624603195c329f6d2","ssdeep":"6144:gBVtTpwdGN/vKkce6pULNMfYvRiLkspZJz1HE+Mm9SVgE7ZNjQt7SwU:gBCMAm6YbQpZh1Um9SVrQt7PU","tlshash":"478423ee76f24a381260bbe0980296d510376712ce8e5c5de735f8756a2e8d40d8a7f3","first_seen":"2025-06-30T12:31:55.400546Z","last_seen":"2026-05-09T07:39:24.4166Z","times_seen":38,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inv-cx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192949\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T04:25:32.749509Z","times_seen":5073,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":106,"dns":13,"connect":7,"send":0,"wait":11,"receive":2,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inv-cx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192949\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T04:25:32.749509Z","times_seen":5073,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":97,"dns":13,"connect":11,"send":0,"wait":9,"receive":8,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/media/logos/favicon.ico","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/media/logos/favicon.ico HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GlxxAUxVT8f9FxV%2Bx1oWR2r2a4SAOAOE0Ap%2FOi%2FRbMJ3ndEQV3TgZBsx%2FspUk%2FmmuHmJyfWpE7neWMKcpmjqgmMC%2F%2FMugKB8mhU%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffde1d8d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23166,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 73x76, 32 bits/pixel","md5":"655a3d9e8b041168af5ed594bc53a045","sha1":"2a10a2b34eda84cfe1b3fb5c7976f6784c0b9c73","sha256":"3460d9a4ed4ae53b60ded9680af38db6d2d4b7c32a20fa0392bf3ebbacc984c6","sha512":"fdd0f1528cdbe5e92a0760fbc2f68a9101aabc64553c96aaadfdac16f68bb8d6d4463558feeae6339dd38caa36a5a4036757c99f6a2c1c15769e1e0e3aa34806","ssdeep":"24:MFbl+VURCShly4JX+anJMVfRC+AQCaMaJaOaWasaNaogAkFzGyGI9NqSjis7AYfe:G8VUISMC2VohQGgLzeIHiPYg39Nllkg3","tlshash":"9da26a6a3f24f255ec2986741ebaedf43d387c13798053e276807fcea2753026a13a55","first_seen":"2025-06-30T12:31:55.402347Z","last_seen":"2026-05-09T07:39:24.424563Z","times_seen":38,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/landings/css/cryptocurrencies.min.css","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:00.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /landings/css/cryptocurrencies.min.css HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MCdN3GE%2FVKACz7nL9XbZ3HT4MmS2H1v%2B65%2BUFLose60NYvTZAy%2BRbZS8j1gHzBwgcUDuz1vjaQ1V8pszncwa5%2FeO2DMG1DjOJs%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffd9ccf18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3648,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"656645c71870ac61f759b2df1050bd6d","sha1":"ff643d5dbf4dd556204b3c8fa02b2501940b8e8b","sha256":"cb9b990ddcd722d7f52d8062368d7e015e4fafc30ed60f4fc24d1ceb6a21f70d","sha512":"7cb599168b825bb2b975a4f789dd3490b1f12557f4350eb22c9ebf6d93f0d16cc02a4cb4c90ac1cadbc447b5f08ffc6b610fc11f87a9fe420085ceae41104b29","ssdeep":"","tlshash":"517121bf59505206f52b58084bfd0b26627d9423a40ed6e07ec3a44dcec9bc59fb12eb","first_seen":"2025-06-30T12:31:55.415692Z","last_seen":"2026-05-09T07:39:24.410694Z","times_seen":38,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"inv-cx.com/assets/js/toastr.js","fqdn":"inv-cx.com","domain":"inv-cx.com","tld":"com"},"ip":{"addr":"104.21.9.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inv-cx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 20:55:07 GMT","end":"Wed, 06 May 2026 21:52:49 GMT"},"fingerprint":{"sha1":"5E:9A:00:E0:DE:02:EA:87:D1:CA:5B:BA:60:00:1D:28:86:45:13:4E","sha256":"4F:39:D7:4B:6D:94:0D:F6:F6:B0:7C:80:27:9E:60:F5:62:71:D0:4C:A9:2C:E0:69:BF:BF:4F:51:44:9F:E2:01"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: inv-cx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://inv-cx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\ndate: Sat, 14 Feb 2026 05:00:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixos%2BQPD4bsx71aITZGftoNBE1Of2F6hSMBegyncXI2X%2FAGKr0%2B4YMf3N46ym%2FvwWBGvtoSpliw56U1CkVcFPuGjUf5hFEBdpgc%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9cd9ffda3d248be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-05T15:12:51.710408Z","times_seen":914,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"inv-cx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inv-cx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192949\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T04:25:32.749509Z","times_seen":5073,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":159,"dns":10,"connect":20,"send":0,"wait":8,"receive":4,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://inv-cx.com/","date":"2026-02-14T05:00:01.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://inv-cx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 192949\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T04:25:32.749509Z","times_seen":5073,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":160,"dns":8,"connect":39,"send":0,"wait":13,"receive":2,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
