{"report_id":"234bc832-aac9-42bb-bfa3-e82783e6093e","version":0,"status":"done","tags":[],"date":"2026-10-04T05:27:58Z","url":{"schema":"http","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"title":"Valorwyck Finance | AI-assisted research for Canadian markets — online investm","dom":{"size":73868,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8237)","md5":"4e547221ddfac5b434b53ca66e023302","sha1":"befe0715300843a1684330ce328fec2bc265fb6a","sha256":"217d3245cb198a4446c3cbd16b7de87908d565f2b1074b44bd12ad28bb85f0f2","sha512":"ae12bb9b990b3413036517798623c52ae34503854548679b2367f2fdbda2e32ecebbf6dab69fe6fd51ff6b60b946e9e21c398167ab8018b8a14ef00bf0e4aaff","ssdeep":"768:JEjJ/+H/DO74+WGPGzRVK4PBCfbCrOXKXjGxHLcHZIvSXbxNtHWo:yjJ/+S74me7qXKXjGxHLIivOWo","tlshash":"8173d772d7e2193700b392e663eb532a36f18107d94285147bfd47681fcdc81be67aa8","dom_hash":"domhashfa8a8bdac831719cd99520520e9dd6f9","first_seen":"2026-10-04T05:27:59.897473Z","last_seen":"2026-10-04T05:27:59.897473Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T05:27:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"valorwyck-finance.cfd","ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-01","domain_rank":0,"first_seen":"2026-10-04T05:21:07.281842Z","last_seen":"2026-10-04T05:21:07.281842Z","alert_count":11,"request_count":11,"received_data":251548,"sent_data":5948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":5,"received_data":246725,"sent_data":2900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":4,"received_data":382350,"sent_data":2168,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"valorwyck-finance.cfd/js/form-aux.45fde34b53ed.min.js","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1b943dc1ee3a0ecea573b5fd197e03","sha1":"8db8d85912e44643836ebb166daf5b3adfef5383","sha256":"45fde34b53edc5bec66cb9cf7a03a2c5aa8e5d19e8955c18780e2521389a6110","sha512":"50e7c2ecf3083ef3989fc42d5a422cda385fbd8323c4063f25e962efe35361ac2ef56ffc7903cd4d68c58b349f02a50e99e15d0e681765fbe4c7a60b03f0ecc7","ssdeep":"","tlshash":"1751f0ae306936335a37afbd8fdb8649eb752173204296103cace4641fb84590272fcc","size":2617,"data":"","first_seen":"2026-10-01T10:19:15.893562Z","last_seen":"2026-10-11T08:46:34.09973Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c560cf9c12635963fe1c31adea9f5f2","sha1":"6537f8d91833c0f4fc4d9df776e4107077312499","sha256":"d37c123863fcedfab0cea024ab2d727a14d883387d078aacdb61ba558a8ff600","sha512":"6eabaf2a86126c2ff1f8cf97c12c2e551c1965527ca1cea2989776d50d579bbe4e33890d65216d9821b0776bf9500f3cea47cf7c589514b1322147ec64fa68e0","ssdeep":"","tlshash":"efe04659894b28eb2d7485e075da2a0e27e57464e9b60868a82e0a0d72f2f93b102a04","size":314,"data":"","first_seen":"2026-10-04T05:21:10.526301Z","last_seen":"2026-10-04T05:27:59.911748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fad1130f6f1d1faf537c5b881e2ac9a","sha1":"a483466abcec789205b179def5abceba78d2bb53","sha256":"2d3b01bb35b4187b21a2f23185d0b37121a397222310643a0eb68f4b684d397d","sha512":"1bb4cd89fef0b68cd4430466e3216a85733010854dac9678a7fe0e8442cb3f6306ebd507eb59ce93e558f73f9eb224d9cc909cf6f3d062613738a46e65faf1c8","ssdeep":"","tlshash":"0e31bfa5bcda71fa14ff31ab419b96e832945547c10ace303a88cc843f8957559bc7e8","size":1873,"data":"","first_seen":"2026-10-04T05:21:10.527787Z","last_seen":"2026-10-04T05:27:59.921431Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"402f27bb79763f9fbf531cf508224355","sha1":"3e3752aeb190303ab72e3c89995b9a0fcc5a725c","sha256":"c789b689e729ac036c658ea4b833d44e64812cb866d2aca737bebea1a08e5554","sha512":"8703c620e0031ee8f1b1d2949cde1059ea4852e72ccf76bf709259833ea6cdf71369a8c57a3a2643c0bace8b83a81f2d5d678a29115d727918500e23db371e6a","ssdeep":"","tlshash":"1221cc6fa8773673282728fd8bbb90142570622320c7dc603c1ca4a55f9c92c1b3aa9c","size":1382,"data":"","first_seen":"2026-10-01T10:19:15.924166Z","last_seen":"2026-10-11T08:46:34.150145Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d858002eac9b997948edd02cd1200656","sha1":"1ea8094e262f24f72081228a2f7e9545b8b60616","sha256":"deef7cc7901751b0a830735ec80e5de8d55bdd8bc0fc2d4cdd2f221b0423e3c0","sha512":"35773b635a2499645a2f40449aa5cbf2c20c7a9c64f736f16f40839ac9abb02f6fe79f30ca43a0835778622f310b1b294850acd2ed0d3ce126ea20067fdecd1b","ssdeep":"384:im4LbB7FJ+pB+YWoLyKnXEI8WnDkVtxh9:OKXjGxf","tlshash":"fd625029ebe321b05573b13d57ef61283bb940070906cd107e6ca7892fd486652fabde","size":15175,"data":"","first_seen":"2026-10-04T05:21:10.530106Z","last_seen":"2026-10-04T05:27:59.924704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/_assets/hoisted.B9aFqeWI.js?v=29","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5036e07cf62de4667e32f572cf7627dc","sha1":"afa95ab64239b1c5a2b475bff3f5bacc61128a46","sha256":"7cffe4cecb02be9a563c4f3eecca214be5e03812e6a274f221c99d3ff81e7147","sha512":"c32ec238b5963e188fc4c9a718201a11ff6b8a8d3c5291b5461c78775c51942cffa390b573142572711770716f69e055ffa47cd6d5a72656edf55f1836f10091","ssdeep":"192:zxsYa9369mtABszWICHke0L/nQyf6ifqroIoFyOOEVFub4IA0FtOvHCrVh+BMn5Y:1sYa9q9mtjzWICHz0L/QyfFfqroIoIO/","tlshash":"ba2285ba7269213646f727eb04fb93883770a4403d46c4541a7d4cc72f78d9e216efa9","size":10147,"data":"","first_seen":"2026-10-04T05:21:10.512749Z","last_seen":"2026-10-04T05:27:59.90044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e669525b552f1c01f67fc22d725b14ae","sha1":"745a50c5ec7e8af53349aee906755a194a7fc9b2","sha256":"f1a2d340dd4328bcf299da8143d4bc88b76ff400c1b2737ded165d24949b8990","sha512":"8ec68ea281bb960a158643f14fb20beaf24d3123cc6f5810aafa0e6be63046aa35a78d74c3b585e911706db2c12e315514684bd31eee2ec0611d0d8aa06acfac","ssdeep":"768:D3rXNC+I4SAGFdGc6HLZSV0Pu81yv4ppIsiCJmGR:jk3GcyyotfpIvCV","tlshash":"bcd2f8edb3552236a9ad9071647f12076ebf30015a84989d787ecdc81fdcec960b6b38","size":30824,"data":"","first_seen":"2024-12-07T20:42:42.6026Z","last_seen":"2026-10-11T08:46:34.087572Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"020c4dd954c1aeea4222867581d9e4fa","sha1":"dcdc1daa160a0b02be4f2e19a94aa67bf2dd9d2d","sha256":"e5ccbce772a72e9602e3ebb4e98b7c08b056efdc0b4242982a0a21d33d29bd09","sha512":"48f5a027bde5b4e90d48a48582281b95c3a839ca78f7095d5f5c2ed7768894474290727a68713bc1cc667bac87099819526f5e1da0ecb2aae55cd17cf67c3c2f","ssdeep":"3072:3PB30e8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tt:3PB3QzBwfxVM8Mq88ubh","tlshash":"ec34e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":253043,"data":"","first_seen":"2024-06-24T16:59:29Z","last_seen":"2026-10-11T08:46:34.112005Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T15:41:36.892644Z","times_seen":451641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.717Z","timestamp":1791091646717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 04 Oct 2026 05:27:26 GMT\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-10-05T20:58:04.927012Z","times_seen":19673,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/css/golv-form.css?v=30","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.726Z","timestamp":1791091646726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/css/golv-form.css?v=30 HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"442-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=835zQin9TG1sNvWU9PA1xjxBXFckvjLd0hUALsJzzbdKmG8PoDPQNVwlGciIA3ZvtQDXpeYStTCxOHProzsZ4h6Gd2%2FOooEA9jQ%2FpAiYkZP5qteoq2HwQKtqHkaVAZjYXWT%2BQ%2Fa5qes%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7080ef2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":1264,"mime_type":"text/css","magic":"ASCII text","md5":"3490dd93d94f32d234dbcac9a90a369a","sha1":"27da5fe3e9f7da5f4102b10dc30c8d96d13ca9c9","sha256":"608f47f2bc10ca622029f3392ffbe69780575f0cb436099d7d7f58bf052fe813","sha512":"f4796ac3a0d365114b57a8531adca620b12c77db96c65b595bffcad969795d5a13813d9fc13cbd28abd2389242ac8e4fd1b7f0c5016a798aac8364c46039d0cf","ssdeep":"","tlshash":"4c11d08516504b04906b81f0b36fcbdd7b445228950fdb7dc9d630fcdb9caa7d4a0789","first_seen":"2026-10-04T05:21:10.507387Z","last_seen":"2026-10-04T05:27:59.899778Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/_assets/hoisted.B9aFqeWI.js?v=29","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.728Z","timestamp":1791091646728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/_assets/hoisted.B9aFqeWI.js?v=29 HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"27a3-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD98D%2Bo5StPBdtjAKOVz5CYavUHSAlrgwImxktsMz1%2FcuhaOJs13aFIGBn3qYM99FvX0UzZyL1mrGQKji6bkObegPnxyjL%2FgoXJbcPh2nzu7BrupgCSaxM1m%2FHeXjSSGJd7LZ%2BIPKqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7080ef3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10147,"size_decoded":4550,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5770)","md5":"5036e07cf62de4667e32f572cf7627dc","sha1":"afa95ab64239b1c5a2b475bff3f5bacc61128a46","sha256":"7cffe4cecb02be9a563c4f3eecca214be5e03812e6a274f221c99d3ff81e7147","sha512":"c32ec238b5963e188fc4c9a718201a11ff6b8a8d3c5291b5461c78775c51942cffa390b573142572711770716f69e055ffa47cd6d5a72656edf55f1836f10091","ssdeep":"192:zxsYa9369mtABszWICHke0L/nQyf6ifqroIoFyOOEVFub4IA0FtOvHCrVh+BMn5Y:1sYa9q9mtjzWICHz0L/QyfFfqroIoIO/","tlshash":"ba2285ba7269213646f727eb04fb93883770a4403d46c4541a7d4cc72f78d9e216efa9","first_seen":"2026-10-04T05:21:10.512749Z","last_seen":"2026-10-04T05:27:59.90044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.905Z","timestamp":1791091646905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valorwyck-finance.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480712\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T15:44:17.216255Z","times_seen":313367,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":29,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/img/favicon.svg","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:27.254Z","timestamp":1791091647254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/img/favicon.svg HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:27 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNYclav2mKnnP0pZZ7JAPfsCbX9l%2FcJCbBAI9qVQZda1v6aegfwd5%2FNwoZKSFR5D5lfBXRtlIw8IilXPbDw4VXv%2FjqXKqU1x8vAjbTIeJS%2FujeDVL6g9wb2i7PsHiOAzsRLndKsPYXE%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"228-65cc1a6d9d080\"\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451c70b5f41a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":1055,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1cf338e15ba5e9a7c767fc55bc7b699","sha1":"1bb51e7bb5755407cb013c92fa0e817c94e20846","sha256":"319b90c54652e3a43af6c2c62db6a64263da716583bcb725d90be573a77be82d","sha512":"cdf2190f0c745032bed8f0dd9db5fae3b31787b050cbc3b40ec2a82901afb817f2b1d60d71e6d218a2f7ca311e96fa475f1f0c95b499b8761f7754e87fd18c1c","ssdeep":"","tlshash":"41f0c928e1ac8c3eea198108da48783162a983c756045311f5a92f7c2f250cbad2f2f8","first_seen":"2026-09-09T06:06:29.559843Z","last_seen":"2026-10-11T08:46:34.105945Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:27.273Z","timestamp":1791091647273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@18.5.3/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 18.5.3\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 1286009\r\ndate: Sun, 04 Oct 2026 05:27:27 GMT\r\nx-served-by: cache-fra-etou8220064-FRA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":71051,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-10-11T13:11:24.513537Z","times_seen":7386,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/styles/pages.css?v=31","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.722Z","timestamp":1791091646722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/styles/pages.css?v=31 HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"3fc7-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpiUqHZFX6sR7Sq%2FwR7aePxTP8TtFg6Se1QGPJi0AohF8M1k3nDHM79PKkIGFRZp2lfkhuhcGEBhMiCzmqJ7Eob3TbCmtCTRRxbIlYdfKyRv08NDAM38s%2Fn1aPNIn44z3P38bYSYzh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7080ef0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3117\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16327,"size_decoded":3879,"mime_type":"text/css","magic":"ASCII text, with very long lines (4734)","md5":"bdde4dbf324f6015578644a804adda39","sha1":"f8e51a9f1c652335972fb4fd18eb675328c93d96","sha256":"9e206c18a3ed78b74a032b95d2dfb6e1d8c6712b28729a56c0f60240563e16a7","sha512":"4ca331082759ff6b2a15d9ac411031b524fd83993097e5a149f4ace0aa65b512861010acedcf80bcf6b8f1887c93e872102a188ae1a0bde0c1fe87a100507aaa","ssdeep":"192:aBd73ycBF4HI/ZFwZFWZF5aC+BxUAzBseLlyM:aB1CcBFcaZuZ8ZoBxUBU","tlshash":"ea72640fbb9431299c2f882679e16bc951249084e51b47edd863ab59cece3771e3278c","first_seen":"2026-10-04T05:21:10.519509Z","last_seen":"2026-10-04T05:27:59.903769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.734Z","timestamp":1791091646734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@18.5.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 10572\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.5.3\r\nx-jsd-version-type: version\r\netag: W/\"7868-dFpQxex+ivUzSa7pBnVaGUp/ybI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\nage: 1647695\r\nx-served-by: cache-fra-etou8220024-FRA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30824,"size_decoded":11347,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27383)","md5":"e669525b552f1c01f67fc22d725b14ae","sha1":"745a50c5ec7e8af53349aee906755a194a7fc9b2","sha256":"f1a2d340dd4328bcf299da8143d4bc88b76ff400c1b2737ded165d24949b8990","sha512":"8ec68ea281bb960a158643f14fb20beaf24d3123cc6f5810aafa0e6be63046aa35a78d74c3b585e911706db2c12e315514684bd31eee2ec0611d0d8aa06acfac","ssdeep":"768:D3rXNC+I4SAGFdGc6HLZSV0Pu81yv4ppIsiCJmGR:jk3GcyyotfpIvCV","tlshash":"bcd2f8edb3552236a9ad9071647f12076ebf30015a84989d787ecdc81fdcec960b6b38","first_seen":"2024-12-07T20:42:42.6026Z","last_seen":"2026-10-11T08:46:34.087572Z","times_seen":201,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":10,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.740Z","timestamp":1791091646740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 06 Oct 2026 05:27:26 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFrfdcY2%2FVV8RbxRuBa52qhH38ljnFb0bUn9Q2InZ%2B1uxebz2R7W7qmXU%2FgssfFL%2FyD1vi%2BC37WOvx7ZBKpoisor6P8zjfe80IPCPikbgWb6bbKC4PMnq%2Bm2qmPe8BMmmPLhKlomTOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\nserver: cloudflare\r\ncf-ray: a451c7082ef6a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T15:41:36.892644Z","times_seen":451641,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/js/form-aux.45fde34b53ed.min.js","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.743Z","timestamp":1791091646743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /js/form-aux.45fde34b53ed.min.js HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"a39-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=244M3j1R9tbITvYWLmTp30hbKK6gLdBCjY7hkMZCVxZ8vtyLLpYDoO7H%2BDCcIMrJ%2FHiFaHof92q%2F1pkghUwOxnAUnEp6AGlqBs6tcXwRghhSp%2BlUUIdAmX4KFuHNedE8sk%2FpISGDPuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7082ef8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1003\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2617,"size_decoded":1777,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ca1b943dc1ee3a0ecea573b5fd197e03","sha1":"8db8d85912e44643836ebb166daf5b3adfef5383","sha256":"45fde34b53edc5bec66cb9cf7a03a2c5aa8e5d19e8955c18780e2521389a6110","sha512":"50e7c2ecf3083ef3989fc42d5a422cda385fbd8323c4063f25e962efe35361ac2ef56ffc7903cd4d68c58b349f02a50e99e15d0e681765fbe4c7a60b03f0ecc7","ssdeep":"","tlshash":"1751f0ae306936335a37afbd8fdb8649eb752173204296103cace4641fb84590272fcc","first_seen":"2026-10-01T10:19:15.893562Z","last_seen":"2026-10-11T08:46:34.09973Z","times_seen":12,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/img/image.webp","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.756Z","timestamp":1791091646756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/img/image.webp HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"16750-65cc1a6d9d080\"\r\naccept-ranges: bytes\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5NHb2HHx49YneHhzV9vA%2BEAhcL%2F1xqLCmUobABesnJpc%2F%2BwuD00mdfCBiwtEc2fkzkmhDrYn3YjHRkRHcBPJx386MpTNnwTBwXff5Jtxaq9nwU6jL%2BPX9SP9icuE7eZR1yEd7T3Lzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7084efaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91984,"size_decoded":92675,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1061x837, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f58d9bde8c420c77b292f7de1d7f2f1a","sha1":"d8bd7b408f9cc820092a2860181b0e2ca3930830","sha256":"b79179f4da1f5059ff7e2a1862254f3a0a2ff12c664806e4c0337ff9923d2372","sha512":"153478eaede31fcc439b99b6152a0a83f18c3f425c7b124212cb02a6857c26261a341f56787bf3a7d144145146ea402a7e5d64d0b3c313f66cd2007eb97f40de","ssdeep":"1536:VbL9cHpfNaHYRAnoi/e5yLCjdHp9qolUzz+hsFYRn5x91bARTn4xFm+L4HC7J4KK:Vn9cJfNru52MGpp9XUzdFU9CTYm+Lf7y","tlshash":"0a93029a42665b60a7792d35c8cdac31f4bc75329c03a9089fd3f593387f116d8427ba","first_seen":"2026-09-09T06:06:29.585008Z","last_seen":"2026-10-11T08:46:34.112957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.902Z","timestamp":1791091646902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valorwyck-finance.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480712\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T15:44:17.216255Z","times_seen":313367,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:27.224Z","timestamp":1791091647224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valorwyck-finance.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480713\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T15:44:17.216255Z","times_seen":313367,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/styles/global.css?v=34","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.719Z","timestamp":1791091646719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/styles/global.css?v=34 HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"b232-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsZoGC11IDWibJuKUNLhMTQJscwa7bZ%2BaLJbDn3akT%2FM082iOZH%2F3Q25OW4gVUUchlKST8vzUVNQ8GxGefPA4IaVNDHEdXgdAVA3nPpPPLQsHAEKIPDE4VyWeT8UJr3fh6dZ4lG2L9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c707feefa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45618,"size_decoded":9980,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"25ff94a1e01a1fa7e7989fd3c72df4ad","sha1":"52c88497bcc60a4500e049b3e8cd112557348998","sha256":"ece752a01c31eb115de9b57775fea7a7dad894865e6c4e1e8f59ecb7f22c9ca3","sha512":"8525ee58c39d6fa50e7f2762841b25b3e1ee66320eb3c1bcd648e673ab9cc242a91f0c49b69139615ae69e778332e6bc86799ea28291851e1ab1a1d75c8ad983","ssdeep":"768:U64X6vSckw1/OxdMB8LyH175ecOa2M5Omw/fevnqI1Cs9hywhs:U64KvSc7IxdM6yH17Ec72M5Omw/Wvnj6","tlshash":"bc23610d57252604b46789987993efc8a3288005cd0ee6bcafe3144cdfdd199fab5b8d","first_seen":"2026-10-04T05:21:10.493079Z","last_seen":"2026-10-04T05:27:59.906925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.900Z","timestamp":1791091646900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valorwyck-finance.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480712\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T15:44:17.216255Z","times_seen":313367,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.731Z","timestamp":1791091646731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@18.5.3/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 18.5.3\r\nx-jsd-version-type: version\r\netag: W/\"620d-oNGsQ2ble3/C+/PqXqwezWw4bSc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1640759\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\nx-served-by: cache-fra-eddf8230228-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2935\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25101,"size_decoded":3715,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"14980f4e4ef578a6e70ec46c6a7c7d38","sha1":"a0d1ac4366e57b7fc2fbf3ea5eac1ecd6c386d27","sha256":"4be0304130ec3de2a5541df54e9e9f98c5f0abada1640b9ba4f46896cb575929","sha512":"e2932e00080fd310685628864f34adf5105ede87fe0559f34fd5ae1f66b86e61010b82794a51b63ff9c2484053c6d562ee940a541ceac26fbe8c34c7c9712f7c","ssdeep":"384:ZvImFjFg1M40/imOgs2J9ZE+xfmYqFD1+vSE8k2eOYcyMR:ZQmFjFg1M40FCFZ","tlshash":"c8b273674bb27914f92be1e1386006b2373b5c03f81e5b3d62e63dbd66810e0a4f3695","first_seen":"2024-08-19T19:01:39.489635Z","last_seen":"2026-10-11T08:46:34.102898Z","times_seen":124,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@18.5.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.735Z","timestamp":1791091646735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@18.5.3/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 59942\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.5.3\r\nx-jsd-version-type: version\r\netag: W/\"3dc73-3NwdqhYKCwK+Ty4ZqUqme/LdnS0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1217179\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\nx-served-by: cache-fra-eddf8230126-FRA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253043,"size_decoded":60718,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"020c4dd954c1aeea4222867581d9e4fa","sha1":"dcdc1daa160a0b02be4f2e19a94aa67bf2dd9d2d","sha256":"e5ccbce772a72e9602e3ebb4e98b7c08b056efdc0b4242982a0a21d33d29bd09","sha512":"48f5a027bde5b4e90d48a48582281b95c3a839ca78f7095d5f5c2ed7768894474290727a68713bc1cc667bac87099819526f5e1da0ecb2aae55cd17cf67c3c2f","ssdeep":"3072:3PB30e8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tt:3PB3QzBwfxVM8Mq88ubh","tlshash":"ec34e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2024-06-24T16:59:29Z","last_seen":"2026-10-11T08:46:34.112005Z","times_seen":453,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":11,"receive":7,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/core/form.css?v=1791091646","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.738Z","timestamp":1791091646738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /core/form.css?v=1791091646 HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\netag: \"1da9-65cc1a6d9d080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZB%2F9r3KII6Ee78qNDeNBgBx9Z8Cl8r%2BFUYAb7sB0O2K8C3g%2F02Y1Suel5PWwhSkANCIKR90TtJwTXSf1t5qGhM6Q2ifOiVhqEM0nOLkIwvT7BOvn1h3hOebR%2F%2F5PbWVT1OsQhx74Tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a451c7081ef4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7593,"size_decoded":2695,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"8e5c1d7237d526df0c9676be820494ba","sha1":"400088ac664204f4ff7a8371589dd6b3cdb3c50f","sha256":"fb6e4a1c827c460ada5faf9dfbc1b2692ae99be7a7331e756eb1ec3b1f561691","sha512":"ff6cce20b90cccb29c75e9c61d189c056683e062b1fd162335a148d2798c001fa6cdb28bd0d908a2036b19f13e77a79c7868ccbf39e445882ab916a3b99a75c0","ssdeep":"192:8qI4xIoK+JBFVw834uqzOzxP8SYOjw+tbcSg:yGJs+tcSg","tlshash":"53f1fe41967316a0a92bc7ec3bee475a3398e443450bc5693ed061b8efce2bd4491fc8","first_seen":"2026-10-04T05:21:10.508954Z","last_seen":"2026-10-04T05:27:59.908906Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:26.910Z","timestamp":1791091646910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://valorwyck-finance.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480712\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T15:44:17.216255Z","times_seen":313367,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":34,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/assets/img/favicon.svg","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://valorwyck-finance.cfd/","date":"2026-10-04T05:27:27.255Z","timestamp":1791091647255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET /assets/img/favicon.svg HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://valorwyck-finance.cfd/\r\nCookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:27 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzSabrjAth6s%2BhrvYwNix8%2F%2FF13jKVyMjIzcfv%2BYpxF73R3QD8C1HRVqXJU%2FLxIzY4jSSIKN2d%2Bt0HWK5puTfSgTr3h%2Birlqz3AdyOU3WxBw5%2Bbt9JIeEwwzCniY0m6DobVLfrKKnYk%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 01 Oct 2026 06:37:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"228-65cc1a6d9d080\"\r\nage: 418\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a451c70b5f42a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552,"size_decoded":1063,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1cf338e15ba5e9a7c767fc55bc7b699","sha1":"1bb51e7bb5755407cb013c92fa0e817c94e20846","sha256":"319b90c54652e3a43af6c2c62db6a64263da716583bcb725d90be573a77be82d","sha512":"cdf2190f0c745032bed8f0dd9db5fae3b31787b050cbc3b40ec2a82901afb817f2b1d60d71e6d218a2f7ca311e96fa475f1f0c95b499b8761f7754e87fd18c1c","ssdeep":"","tlshash":"41f0c928e1ac8c3eea198108da48783162a983c756045311f5a92f7c2f250cbad2f2f8","first_seen":"2026-09-09T06:06:29.559843Z","last_seen":"2026-10-11T08:46:34.105945Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valorwyck-finance.cfd/","fqdn":"valorwyck-finance.cfd","domain":"valorwyck-finance.cfd","tld":"cfd"},"ip":{"addr":"172.67.159.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T05:27:25.965Z","timestamp":1791091645965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"valorwyck-finance.cfd","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:41:16 GMT","end":"Wed, 30 Dec 2026 05:41:15 GMT"},"fingerprint":{"sha1":"5A:9B:50:79:3F:11:09:61:97:9E:CC:E1:C6:07:62:6A:74:0A:7A:F9","sha256":"28:26:03:0E:1C:B8:93:2D:3E:5E:7D:6F:20:40:D8:5E:E9:53:4D:24:AC:12:FA:65:57:DE:1F:D1:3D:C4:6C:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: valorwyck-finance.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 05:27:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8m4hSDabDQ7vve0zrHKIOWYtLBJH7RXKoef9wOQgYrQRDux7%2Bwx0mTwOYrIMhuK1xd207izICt2WHZS2Mc5UdMOrcW766kOFr0GxOe7qv18S9wBFzsNDj3wUSWzKD0p648%2BpU2jxGV4%3D\"}]}\r\npriority: u=0,i\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f; path=/\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a451c7041e7ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"cd21e1df056bc8454d98ae21454e1c1f","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=cd21e1df056bc8454d98ae21454e1c1f; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":65699,"size_decoded":18374,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7873), with CRLF, LF line terminators","md5":"67490be9f7a54fc5d784b09696dd81b6","sha1":"6ad62505bfa65416ec9b8406bc70d5fff3e87008","sha256":"74425e899468ee6a3ccf94dc796f0ceaeffcc8a99c1d6df943ecfdd73188764e","sha512":"d535c21e1007a5063b727da255f7091b624c9cecf3bb9fe9dc637057edbf72af10503f19fcf46fe56e14070205e21d7702005b74a01fc9f8b72671cf2ceac1f8","ssdeep":"768:kMeFZcqURVK4PyCfbCr+ouCvARRLcHZIvSXI9XZt0:OcvbouCvA/LIiv7t0","tlshash":"b853d772a640293b407393f963b6a35af7f28107da0246117afd47291ff1c80de67ad8","first_seen":"2026-10-04T05:27:59.910233Z","last_seen":"2026-10-04T05:27:59.910233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":106,"connect":17,"send":0,"wait":378,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"valorwyck-finance.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}