{"report_id":"34336f90-8b84-4c6a-974a-4087e8586423","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-05-06T22:53:08Z","url":{"schema":"http","addr":"wlfik.com","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"104.21.88.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wlfik.com/","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"title":"World Liberty Financial - Airdrop","dom":{"size":88401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12412)","md5":"52eb6d90cc726ee9b0dc6dc76eb60422","sha1":"d30143e3a5bcd8cdc551088a81799c5ad1c56970","sha256":"1e9ca3f94dab3ab6ac719c5b9e07ec1bcec06e811f9d2b62c31aaed315dd12be","sha512":"63f4ffc797e9fe2a569be92c12666ec8ec4fb268c07f247a3428b1255a38201c274954c6fe7082a6b15abc91b6eb81afbd5372b99c84f377ae932757f8e68c30","ssdeep":"1536:YS9JNXPcsw7YasLMb5GVCyNfmPNihsgydgXdLVL3L3Z0j20hXSMMoj857IIfqNTY:YSBIJck05RsOTdzoy5","tlshash":"c383c4e0e1779032a1b3d6c656675b15b5f1a407e7071028b7fc922a0fcec97ba1b81e","dom_hash":"domhashb2b34f833a1372e8666b5a756d225c24","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wlfik.com","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"104.21.88.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T22:53:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"wlfik.com","ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-18","domain_rank":0,"first_seen":"2026-05-06T22:53:11.457232Z","last_seen":"2026-05-06T22:53:11.457232Z","alert_count":15,"request_count":14,"received_data":2703777,"sent_data":6016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"wlfik.com/js/wallet.js?t=20260111","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9da9fbf4930da83342de5d7b825037b7","sha1":"b63c8455a886c438382e38a9a7d71dc46d63fc94","sha256":"3c85d786a9fde9342c0b13884c78d769e6b694d1ffab96469fac6937ca65fd6a","sha512":"2a7655c366c0206eb907961284a7c4d80b23392beaee085dba96e4e88bb2dd8e9a56865618ece336f716799c31b80809bf069e7c23bb36768825d66f496b35c6","ssdeep":"192:6/QL6vZOEgFcsqhkLJ8ePHW6pLte9tIUAD2bCQ88sF7x+T92HoZiq8w4Yubd3qiN:6dROEgFf8ePHVrD2bt88Kx+T92Iihffp","tlshash":"74a2126ae2925707407313284b5363bdfe3a921356410a367bfc73611f374a6aed2e6c","size":22760,"data":"","first_seen":"2026-05-06T22:53:16.652774Z","last_seen":"2026-05-06T22:54:11.275245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/signtron.js?t=20260106","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1975741a92667546f282bdb4049f5e9","sha1":"7bb02f9d2f43f201e93e99ec12afa2d82c8bc24d","sha256":"536e868b4f5e218053668c9b7256c11fef3be4490e523321722e70eb31deb0a0","sha512":"40f3117ca20bda48abb48fa7bf1a979fcf7215537b6f9d11dee24f6727c65f544b8b3df9a9ba323831f227a6ad943842286b9697664bef634f9c682592c5dbad","ssdeep":"1536:z7e4BNl5Ycze7a6hWGiGdMuEh9apfq/6ky/fBTinN48qgW+5PuTsJ:OmNl5Ycze7a6hWGiGdMuEh9apfq/6piD","tlshash":"de3371c127c5bc82235b5b77b316b1e5e52a9ce9b58848cef2447c64f0ae912fbc4271","size":52154,"data":"","first_seen":"2026-05-06T22:53:16.656552Z","last_seen":"2026-05-06T22:54:11.275778Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"704a7a0cdb8cbd3d7e732df1128b1600","sha1":"9641fb782546902e7300cd7d33101ec48147362c","sha256":"457a5088715b5deca539b3c75890ffbee65e3b4d79ebc0d5e3aae7a7a470bba3","sha512":"bbca12052c4f7f1d74ab61df2b3aaf02955e1f981e354ea812833dd1a79bcd8dded1bd416bd8c4f696073a8c386076345a34edaaf0b0b3063d91d6044ef020ef","ssdeep":"","tlshash":"00e02656f82341c38664c1482383b240605ab0df75c9c0c93b55a2231f460a7c5b268c","size":325,"data":"","first_seen":"2026-05-06T22:53:16.669566Z","last_seen":"2026-05-06T22:54:11.278686Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/layer/layer.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c07601c9dc7a051f684ada8b5a588c1e","sha1":"10b905cb285468743b548c66ec0a54f7204ed392","sha256":"96f235f5991ceb8e21a80d7090eced3d3792b451b52e3614713a07e23d1d563c","sha512":"d14baec3781b4ad8aa2b284184d7d02be413ca75df4ec69f3274f1acaa1dc71dc51f552a5e0d8dc74ae0f4326031512a11bd53bf90a6fd869493f78ba7810ea7","ssdeep":"384:B13Cih5R93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:B1Siz3i0QtvTKiFSb2o","tlshash":"72a2c76a755034976323906ad10f7a0b31b21d24d7078128f22bb4be1dbcd99a2b7f5f","size":22724,"data":"","first_seen":"2023-04-07T18:53:04Z","last_seen":"2026-05-07T02:06:13.64356Z","times_seen":11010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/signall.js?t=20260106","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2d81deb35acf18ec177aa271543550","sha1":"5ab979335b27348c1e260061486232c7ba278bcf","sha256":"ecdb4c0e26144c880561629158c231e4e3f1e1f6b1c7164af5a06310d4b93a35","sha512":"236fcfe2ab854bb688da31d1992d9e5da8586a84e65fc5dd833b629eab64eef9c199b2901d97c25460aec621a449d23a567db64c9b04a4adae3feceabdb8f39c","ssdeep":"96:BIkEmfmINP9uF/EB+uNHmgFc1/k+JjYUZHZWTctPgNZQKmmlF+V9VsltaW5miV5V:B3Emf3/2sBnNHDcJk0JITWPySY+3ViaS","tlshash":"27c15d8167d6f9c24647f23b3b27dae9fb5bec8065402d09b2013c00f95a711f6e62b9","size":6021,"data":"","first_seen":"2026-05-06T22:53:16.666159Z","last_seen":"2026-05-06T22:54:11.276792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/TronWeb.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bec71684b8fa5071b107af7b1928714","sha1":"d5a1d983dba4eb777cf22743a2334b7b6769df44","sha256":"57e097e882826fd9291948ada0560415aef6b3d2c787f716386045a73e40997a","sha512":"0bb91190908d46b6e299c2d133e3cea3150f05b2162129f7ee463f31f190a7348a8e67a08d149af602444b0b586fff33257dd3de18f11d6c096197d442356562","ssdeep":"6144:EOzAZfhFKRnmSvtzV4uxjZlvTg2VDnGbN7HF2GCNvmsVN:fAdadpEQEIGamsVN","tlshash":"cce4298872e1f0a2839725a4042f500bf17af92d688d546cf354e8f23db99d9963bf35","size":685653,"data":"","first_seen":"2026-05-06T22:53:16.664573Z","last_seen":"2026-05-06T22:54:11.27475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/sign.js?t=202601066","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f95f27448b69dff0aea790d1232bb1","sha1":"b074634482091dab0e3799348d12fb145d95bfa1","sha256":"24114f7283a499580e03c79b656aad9052bcb1d7fcc3996c75721dadce6336f1","sha512":"f2fffa838f8c6feafee53c2f0d86e9579252aa71f7508efdfbb592e47d2a3ded03ceb4897ed2324901b1377aa6fece1ad0dac01ba601995c5cc0f9a8bc253568","ssdeep":"1536:nVPg0qHv7QqozsfyaQXw9czoOF66F2fHmZqj0LPmBJtaLVn:nV40qHv7QqoQfLQXEwow2fGE+mBjahn","tlshash":"319320c236e5bc92274b57737316f5e0e42a6d5ab98848cef2087c18f0ad522fed1275","size":96198,"data":"","first_seen":"2026-05-06T22:53:16.654301Z","last_seen":"2026-05-06T22:54:11.276304Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/assets/index-DFzoWKX2.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00455d456cfe49050f6db9899ac243ed","sha1":"058de155ee0b3e4d709437262d164bc3b9a6d01c","sha256":"8b81371b7bc7e3d8b390330b485e9c907d41476213bea14690830feb5e455ad6","sha512":"74bdb85fa97513e71e4b8aced1368ea51c58fbb7b7c64bbc1ef37b985f241ffe29ffeaff9f3a41790c67b80c65abc56ac48af65f2a7da3255e157cd45e04eab6","ssdeep":"24576:9JyQtZI+TN2kSHL6LBUB/VHH9aVkaRSG0wfumybyLeidGb3RlGWoapZE:9J7tZIcN2kSHL6LBUB/VHH9aVkaRSG0i","tlshash":"92354b9072a5b03507d755d864361101f238a854700dc0ecfaac9dfbbfea98a867bf79","size":1075123,"data":"","first_seen":"2026-05-06T22:53:16.671245Z","last_seen":"2026-05-06T22:54:11.279891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"579f57f954bf9ae222e14bafa056fdd3","sha1":"7bf7c9d76670bb77283ed7ddd9a1e21628efa460","sha256":"82f3a46e5d464ca56d58d9bc7c4bd447da67f42ed3c211841f5e1f2035ae38b6","sha512":"e5e3261221bf112eb539624d05a089e7e66d1ecce815104141a8aea3959a2c37fe540eeca710a2aacad86611c7ad9cc6294b653452e81155392ca421c7d0a824","ssdeep":"384:Nb9zF7ezy1AQ7jTSfbvdzCBGoJdOBAW/ch1Hme5fnyDZjKb:NBzF7ezymcqTFzCNOCW/cWe5fnyDZjO","tlshash":"3db27312f2678852419299cd5b1ba4803328b0437f42b42cbfaed6485f4de5f90fb9ed","size":25288,"data":"","first_seen":"2026-05-06T22:53:16.672601Z","last_seen":"2026-05-06T22:54:11.28047Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/assets/index-BXXxQcQP.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9676a783ffa8d74aa86397f2c8051894","sha1":"da27519e86e937bb8e3dd063d81e69151d028a62","sha256":"13b8ef9afb58973cb62fe99efeaaed84b9b9d461f2a5a671a455c6046207a701","sha512":"2a342535a8561c9d3ae6bd331ae63aec9239e04136a0f5b3b64e5f2fff0f146ed1d9dae659c236096e85afee667c0d5310075732fa69d99d20e8bdca9ba445dc","ssdeep":"768:Rjslr/XSQ+fDRu9YIRu9YY3nfAltPoJ29RhOKSkOUqy9mn/BpguAxD9u7mcYpV:1sFfL+fVSI29RAKSoo57Ax9","tlshash":"fff209f0729f51b592c6198c74265900901881b8e60d803d7f9d9dfad8af781ceaffda","size":35140,"data":"","first_seen":"2026-05-06T22:53:16.658218Z","last_seen":"2026-05-06T22:54:11.277728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/jquery.min.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4dfa71bbab87f2dcb6c28514f3e3337","sha1":"180eee80b53a371cc86646a0a1e31b74ced9f9a7","sha256":"eb1ea280f445396121700c3ce9d823788a892761a249884b8eb4271cc68544f1","sha512":"7568b87eba86eed07255ade661e83d5a5fa46952f11539db17e1deccd899ae746e4d5f0b949fd39c299c844a9f653a3b76895092586db33a3e057c7fb92d99e8","ssdeep":"1536:PEPtyzB6+GczpYSxqbHlqurr62SqDVEXwd5J/BL4bG8VXkenCuQKiOpl:QFA6r62S017HufQKiOl","tlshash":"68833add76c6b02217ab61b6407f110ff376699d680d8410f124d8e5bc78a8a827bf7d","size":88388,"data":"","first_seen":"2024-05-27T13:56:10Z","last_seen":"2026-05-06T22:54:11.273151Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/ethers.umd.min.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e82f116eb910af033a957044afb325","sha1":"67c0aabb2fdd81c18d0f411efb07c6f7711010f5","sha256":"74e00c3e2a9ccd312e6d5154f9ccb0911d1b34cb49bc8220244a292a0a773c21","sha512":"7feb7afffaf3dc8cb7869d428b0b6c8a062dc96b8693b6dfeb197645338fbe6c8c21f4d02788b2e8b83575a8756ec2d0f522e275e24689c8263a406c0573f568","ssdeep":"12288:qlYZbf+vZG4ga24VcMufQDPfC18gZlhBP3koNz7jTO:qlYZf+vZG4ga2TMufQenT3Nz7fO","tlshash":"adb44cd172e3647287d618e12c650902f238f952705d40ecf66cdde26eabd8994bbf38","size":505773,"data":"","first_seen":"2025-05-04T18:58:50.91952Z","last_seen":"2026-05-06T22:54:11.274245Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wlfik.com/api/airdroplog?item=wlfi\u0026chain=1","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:49.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /api/airdroplog?item=wlfi\u0026chain=1 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:50 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaTtGiiLjQKmtteNYzYEeqcj1%2F36vGvI4NoqZ76j9CWAaYoFXuMjxTBRKLkBasx5DWoW2%2BdvwYYQKBy10fCaP4yFMI9rHwapQe8d%2FjfeCErsGsvHBXwR1p%2BNyNc%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f7b8eb89828b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5428,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"68d53663b61315f259873fbe08212370","sha1":"368df33642631ed4521ccc05d0bfda4a85f6a89e","sha256":"e4a986d2ee2b46ea621b3ca3fb37cb9d0f98341c1265c6ee43d68d033221b724","sha512":"dd8145c0c2747d616d7997cedad437382496a8165fa25a600e5596bdfc0d2275fd5a83433ec53ea8385172981965fd2218759dcb6097a4a204a64374bd3dba59","ssdeep":"96:Xf+IZIrHeYOtfEiOAQJ346YJ8BRJYcHysdDgT:PBZIsOirYYpsdDK","tlshash":"1ab13e9402802e1b3264eec46b2a4e9440f677c76c8ad5a4c0bfbc6756f4df5998f20b","first_seen":"2026-05-06T22:53:16.644767Z","last_seen":"2026-05-06T22:53:16.644767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":768,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/images/wlfi/favicon.ico","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:49.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /images/wlfi/favicon.ico HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:50 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cP8OxbUtbDWFQfnom9BjnyjY9yQjB6m4N4AjmH7KkRH3%2FxULQud1dP71Bj9dgxwDMxguCB3Y0zu1ZZghrNTBHDkaRSElhYH3zBphF0ki4kFmtPVrcLoXFEGac4o%3D\"}]}\r\ncf-ray: 9f7b8eb9d832b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"282c089bba9d3ffec09cd70ea267172e","sha1":"5bc26f9a6fb9d889ca68908d073401f314ffd900","sha256":"243c55524adb5705414aba8d0f98e33c8a888509c95fa8ff2b594b7d89b52ca4","sha512":"b82b855bcb5adb48044cb1d288ca51aa0e4556d78b5fd53e3b8c6b9283a7205355022f4ef93daa64823f21e54068c5f0a538237a643e9e5f27f5cc1e0dae865d","ssdeep":"48:jv+JF8uWZfMMMMM22A5MMM99Mb2SVXQy6wOMYOWJaAXE2r:j03WZfMMMMMZsMMMPMySlFOMwJl3","tlshash":"c462395f8d72e430d4199f3c81549245c78a74da2f6abac241026fedb3310ddcc69bb2","first_seen":"2025-07-12T22:44:49.179671Z","last_seen":"2026-05-06T22:54:11.278238Z","times_seen":201,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/assets/index-DFzoWKX2.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /assets/index-DFzoWKX2.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKhRvY4y1x6OqPRwJylpzVO8kxOykdombZZEOLBJKprOO78BwsctfmO9cH6PzbyhT7%2FujVfv67IGM6GYkHDgA3JGz%2FPtqQAPqQk3wg0BFFrnrpc1O5iQeXJFYnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5feab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1075123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28077)","md5":"7fbbb9fff9c6ffd230297dd478fbe861","sha1":"8ca17379adcf46f1b7dfc5ef9f7fd102a22bb499","sha256":"aa683fe6bbcbfe0df8b73e248413e7ff205d019659bdd24acec67f343f98b88c","sha512":"4a868f86bb9e7153b5b9483eab62fdaa5f85014be52106d8ac28cb8b92b86407d1ec2459308db3ad1e4ee5e1bda76327a00ce226212ec6c8fbc46eac7ed3b0b2","ssdeep":"24576:9JyQtZI+TN2kSHL6LBUB/VHH9aVkaRSG0wfumybyLeidGb3RlGWoapZF:9J7tZIcN2kSHL6LBUB/VHH9aVkaRSG0r","tlshash":"40254b9072a5b07507d755d864361101f238a854700dc0ecfaac9dfbbfea88a867bf79","first_seen":"2026-05-06T22:53:16.64827Z","last_seen":"2026-05-06T22:54:11.272178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":759,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/jquery.min.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQV%2Bt8axZNDYELeNJiAPIXewUqul94sCsRlX2fOR7%2F92ChfJrH%2BvHfnzDlCUXO7PkD%2FjVNF2KeHMpHZmyFhzQ76WrLyNXGLQh%2BDxjMlNSrVKoN2kXAymYCpDzO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5febb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65444), with CRLF line terminators","md5":"b4dfa71bbab87f2dcb6c28514f3e3337","sha1":"180eee80b53a371cc86646a0a1e31b74ced9f9a7","sha256":"eb1ea280f445396121700c3ce9d823788a892761a249884b8eb4271cc68544f1","sha512":"7568b87eba86eed07255ade661e83d5a5fa46952f11539db17e1deccd899ae746e4d5f0b949fd39c299c844a9f653a3b76895092586db33a3e057c7fb92d99e8","ssdeep":"1536:PEPtyzB6+GczpYSxqbHlqurr62SqDVEXwd5J/BL4bG8VXkenCuQKiOpl:QFA6r62S017HufQKiOl","tlshash":"68833add76c6b02217ab61b6407f110ff376699d680d8410f124d8e5bc78a8a827bf7d","first_seen":"2024-05-27T13:56:10Z","last_seen":"2026-05-06T22:54:11.273151Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/wallet.js?t=20260111","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/wallet.js?t=20260111 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IowTn8E80Ny%2BDrrURWEOSgo0zuUvSrkJQsDA29HAHQBMHydMoXRGLoNXE1TgwSe5Oym9UsoVbO8E7owNxw32l5Odk4Ow0GHhHdMOMWSxOqqpyHUhachN%2FAsly2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5fefb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9da9fbf4930da83342de5d7b825037b7","sha1":"b63c8455a886c438382e38a9a7d71dc46d63fc94","sha256":"3c85d786a9fde9342c0b13884c78d769e6b694d1ffab96469fac6937ca65fd6a","sha512":"2a7655c366c0206eb907961284a7c4d80b23392beaee085dba96e4e88bb2dd8e9a56865618ece336f716799c31b80809bf069e7c23bb36768825d66f496b35c6","ssdeep":"192:6/QL6vZOEgFcsqhkLJ8ePHW6pLte9tIUAD2bCQ88sF7x+T92HoZiq8w4Yubd3qiN:6dROEgFf8ePHVrD2bt88Kx+T92Iihffp","tlshash":"74a2126ae2925707407313284b5363bdfe3a921356410a367bfc73611f374a6aed2e6c","first_seen":"2026-05-06T22:53:16.652774Z","last_seen":"2026-05-06T22:54:11.275245Z","times_seen":2,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"wlfik.com/js/sign.js?t=202601066","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/sign.js?t=202601066 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrG7gF7y%2BTk6Far3irB1f9CY0me8PcwBsFrQovyDkWfkAuBigALvbxJGrFwzcEjfZOFVgfQ3fVFlQwnXn6ZqSXbbAfHTPCZKtbp0Bl%2FTFm5WPewsw1AVHgf5oVQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5ff0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8f95f27448b69dff0aea790d1232bb1","sha1":"b074634482091dab0e3799348d12fb145d95bfa1","sha256":"24114f7283a499580e03c79b656aad9052bcb1d7fcc3996c75721dadce6336f1","sha512":"f2fffa838f8c6feafee53c2f0d86e9579252aa71f7508efdfbb592e47d2a3ded03ceb4897ed2324901b1377aa6fece1ad0dac01ba601995c5cc0f9a8bc253568","ssdeep":"1536:nVPg0qHv7QqozsfyaQXw9czoOF66F2fHmZqj0LPmBJtaLVn:nV40qHv7QqoQfLQXEwow2fGE+mBjahn","tlshash":"319320c236e5bc92274b57737316f5e0e42a6d5ab98848cef2087c18f0ad522fed1275","first_seen":"2026-05-06T22:53:16.654301Z","last_seen":"2026-05-06T22:54:11.276304Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1003,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/signtron.js?t=20260106","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/signtron.js?t=20260106 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uRQwd%2ByIm%2FiFuSFgheYT9fKA9se95TYp1iyz83KDSjdpyjThYjTl%2FBhNQYvVW9il2QwN7rz1Tp9nK4n1ACncCr8mgRxcNVNEjwYszG5N%2BIcw96HNIfqVpJndkk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5ff1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52154), with no line terminators","md5":"b1975741a92667546f282bdb4049f5e9","sha1":"7bb02f9d2f43f201e93e99ec12afa2d82c8bc24d","sha256":"536e868b4f5e218053668c9b7256c11fef3be4490e523321722e70eb31deb0a0","sha512":"40f3117ca20bda48abb48fa7bf1a979fcf7215537b6f9d11dee24f6727c65f544b8b3df9a9ba323831f227a6ad943842286b9697664bef634f9c682592c5dbad","ssdeep":"1536:z7e4BNl5Ycze7a6hWGiGdMuEh9apfq/6ky/fBTinN48qgW+5PuTsJ:OmNl5Ycze7a6hWGiGdMuEh9apfq/6piD","tlshash":"de3371c127c5bc82235b5b77b316b1e5e52a9ce9b58848cef2447c64f0ae912fbc4271","first_seen":"2026-05-06T22:53:16.656552Z","last_seen":"2026-05-06T22:54:11.275778Z","times_seen":2,"resource_available":true,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/assets/index-BXXxQcQP.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:49.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /assets/index-BXXxQcQP.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/assets/index-DFzoWKX2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:50 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQDVHVh%2B9gWCfC3%2B3XgS2A9aIStQ7xHC6LP23AHV9P7C4TRPqiqDz%2FnH7mEY21A%2FBKZPoTOrs82vRkHSmssbII7t8J3Fs99CVLL1b0NuFkNPzPGFa%2FeuDfPKQaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eb83827b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34918)","md5":"9676a783ffa8d74aa86397f2c8051894","sha1":"da27519e86e937bb8e3dd063d81e69151d028a62","sha256":"13b8ef9afb58973cb62fe99efeaaed84b9b9d461f2a5a671a455c6046207a701","sha512":"2a342535a8561c9d3ae6bd331ae63aec9239e04136a0f5b3b64e5f2fff0f146ed1d9dae659c236096e85afee667c0d5310075732fa69d99d20e8bdca9ba445dc","ssdeep":"768:Rjslr/XSQ+fDRu9YIRu9YY3nfAltPoJ29RhOKSkOUqy9mn/BpguAxD9u7mcYpV:1sFfL+fVSI29RAKSoo57Ax9","tlshash":"fff209f0729f51b592c6198c74265900901881b8e60d803d7f9d9dfad8af781ceaffda","first_seen":"2026-05-06T22:53:16.658218Z","last_seen":"2026-05-06T22:54:11.277728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":989,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":989,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T22:52:46.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 May 2026 22:52:47 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\ncontent-language: zh-CN\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UG5OsJbhJl5Uf4AFOBE%2FYb2ye%2FzImJ%2FLd4EO5kCqTkN9CGOMn0AhDpzB4eTfK%2BB01CF0Yr0PrKvVzCVPeQRoK7uy92KFXerRl4WlgRDk%2FVIPN92lDd22vkwVD2s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f7b8ea3eebc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":67997,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1443), with CRLF line terminators","md5":"cd6aba894eec5a0eab33e686c44388d7","sha1":"943b2945acce034e1294514b786a7463097f57ba","sha256":"6da3dedaeef1f3063a96155f0978a1eec9116ca6605e6255f6a6e96963973f50","sha512":"bd17456fb629384dba9a615f9c24a12d3bf36f12e6a5b6eed6b4e70b9596d1f242ede15c64c195b82218bef2157e330f61cd496113dcabf1e4dff889df53c28b","ssdeep":"768:woouphbqgeRusvS/ZgXzQAtxCr0daUJScuz8B4cV1s0aaUlbRMsxRgwYpuY5nyF:nRfE7XW0FrYaUfbqpuYC","tlshash":"ed63e832e5505436f1b3cac89a529a8af262f30bd303422977fed3550fb2dd6c91794a","first_seen":"2026-05-06T22:53:16.659913Z","last_seen":"2026-05-06T22:54:11.271612Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1081,"timings":{"blocked":19,"dns":1,"connect":2,"send":0,"wait":1042,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/layer/layer.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/layer/layer.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOmoQsDqFY%2F68X5nXu8LDoJ76Ibe9onlSXvCPMdNp6CfJ813yYwdwHdTK2QQD%2BdYSJoVuxEei8fu0Jeyj7TlWCADcb5lBnczDt9%2BiJIAuQRVWoknEgY2O7R4RXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5fecb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22738,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22666)","md5":"c07601c9dc7a051f684ada8b5a588c1e","sha1":"10b905cb285468743b548c66ec0a54f7204ed392","sha256":"96f235f5991ceb8e21a80d7090eced3d3792b451b52e3614713a07e23d1d563c","sha512":"d14baec3781b4ad8aa2b284184d7d02be413ca75df4ec69f3274f1acaa1dc71dc51f552a5e0d8dc74ae0f4326031512a11bd53bf90a6fd869493f78ba7810ea7","ssdeep":"384:B13Cih5R93iKTtXSt/KrGriu46K+Lxz6PTElH0jlhpPtwo:B1Siz3i0QtvTKiFSb2o","tlshash":"72a2c76a755034976323906ad10f7a0b31b21d24d7078128f22bb4be1dbcd99a2b7f5f","first_seen":"2023-04-07T18:53:04Z","last_seen":"2026-05-07T02:06:13.64356Z","times_seen":11010,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/ethers.umd.min.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/ethers.umd.min.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1pmjANEItER4bNa9MdR6wmynETyR2QdpKJE80Dj1UgYn2AB6U5IQz6K583LO%2BQ9YguRpu8sr89btN0%2FAAkvQXCPd5bN0MVMsEsPV9dTz63wNZFjvCjve3DBDjM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5fedb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505773,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"72e82f116eb910af033a957044afb325","sha1":"67c0aabb2fdd81c18d0f411efb07c6f7711010f5","sha256":"74e00c3e2a9ccd312e6d5154f9ccb0911d1b34cb49bc8220244a292a0a773c21","sha512":"7feb7afffaf3dc8cb7869d428b0b6c8a062dc96b8693b6dfeb197645338fbe6c8c21f4d02788b2e8b83575a8756ec2d0f522e275e24689c8263a406c0573f568","ssdeep":"12288:qlYZbf+vZG4ga24VcMufQDPfC18gZlhBP3koNz7jTO:qlYZf+vZG4ga2TMufQenT3Nz7fO","tlshash":"adb44cd172e3647287d618e12c650902f238f952705d40ecf66cdde26eabd8994bbf38","first_seen":"2025-05-04T18:58:50.91952Z","last_seen":"2026-05-06T22:54:11.274245Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":995,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/TronWeb.js","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/TronWeb.js HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BhyUSHd6ORs3vLGE2u8H7WV954pmnCRpjTZSkRzxpuOOX%2FsBk6sQJP%2BmB5eCx7U1EU50g9yDElH0MSzA84FrmfKCL%2BRuLsB%2FEAwU2MHXN18hVBdm2ZE8cX3SGDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5feeb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4bec71684b8fa5071b107af7b1928714","sha1":"d5a1d983dba4eb777cf22743a2334b7b6769df44","sha256":"57e097e882826fd9291948ada0560415aef6b3d2c787f716386045a73e40997a","sha512":"0bb91190908d46b6e299c2d133e3cea3150f05b2162129f7ee463f31f190a7348a8e67a08d149af602444b0b586fff33257dd3de18f11d6c096197d442356562","ssdeep":"6144:EOzAZfhFKRnmSvtzV4uxjZlvTg2VDnGbN7HF2GCNvmsVN:fAdadpEQEIGamsVN","tlshash":"cce4298872e1f0a2839725a4042f500bf17af92d688d546cf354e8f23db99d9963bf35","first_seen":"2026-05-06T22:53:16.664573Z","last_seen":"2026-05-06T22:54:11.27475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":736,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/signall.js?t=20260106","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:47.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/signall.js?t=20260106 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:48 GMT\r\ncontent-type: application/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zw%2B2GFdHUqvzqR%2BHw0ASe7hx1oMOV4r56lEVo2U8kTZScrfYjYbKDT5J9%2FC9NQdbYkMkuItEB%2FFoeTzmJNTcVToOSUELe8oe8wY0KZ%2FULQn6K8G%2BNLzekcXRj1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eab5ff2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6021,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6021), with no line terminators","md5":"1b2d81deb35acf18ec177aa271543550","sha1":"5ab979335b27348c1e260061486232c7ba278bcf","sha256":"ecdb4c0e26144c880561629158c231e4e3f1e1f6b1c7164af5a06310d4b93a35","sha512":"236fcfe2ab854bb688da31d1992d9e5da8586a84e65fc5dd833b629eab64eef9c199b2901d97c25460aec621a449d23a567db64c9b04a4adae3feceabdb8f39c","ssdeep":"96:BIkEmfmINP9uF/EB+uNHmgFc1/k+JjYUZHZWTctPgNZQKmmlF+V9VsltaW5miV5V:B3Emf3/2sBnNHDcJk0JITWPySY+3ViaS","tlshash":"27c15d8167d6f9c24647f23b3b27dae9fb5bec8065402d09b2013c00f95a711f6e62b9","first_seen":"2026-05-06T22:53:16.666159Z","last_seen":"2026-05-06T22:54:11.276792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wlfik.com/js/layer/theme/default/layer.css?v=3.5.1","fqdn":"wlfik.com","domain":"wlfik.com","tld":"com"},"ip":{"addr":"172.67.172.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wlfik.com/","date":"2026-05-06T22:52:48.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wlfik.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 15:34:07 GMT","end":"Wed, 22 Jul 2026 15:34:06 GMT"},"fingerprint":{"sha1":"D0:06:94:5A:99:AC:58:F2:1C:99:03:C4:66:1C:AF:DA:A7:C9:31:1E","sha256":"8D:62:31:2D:75:AE:CD:F3:57:A9:83:DF:CE:DE:F8:9F:A6:2C:49:17:01:FB:9C:D8:1D:34:D2:F5:B3:C3:0C:A6"}}},"request":{"raw":"GET /js/layer/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: wlfik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wlfik.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 06 May 2026 22:52:49 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\nlast-modified: Tue, 28 Apr 2026 14:31:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjhTo3y8mtXRbsmmJuSTXswCOWb%2FevQKsiyTxVFjSq6O7LpggxGPIecHiXIv3ZfeMioJUSaAYMkAh1q8xr3%2BH%2BjX9NknLuy9cEzPBiSVtUeWmugGSVNDIOij8xk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f7b8eb20808b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-05-07T05:14:54.264885Z","times_seen":50545,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":751,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"wlfik.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}