{"report_id":"54a3b56d-f193-42e5-93c4-73cf3a37c88b","version":6,"status":"done","tags":[],"date":"2026-04-06T12:51:08Z","url":{"schema":"http","addr":"wealthvault.cc","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"104.21.91.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"title":"WealthVault","dom":{"size":416436,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56485)","md5":"745d24600b4ee11a1a4a729388d34520","sha1":"d61fdf851c350497f422d2211f93c94232a8c03e","sha256":"325441d58cd8ad65a4208f70728fa988673d67cc9238630ba4476183fd894602","sha512":"f8da7644d8eba33b7fe2bdf175be62d721f276a8b4a976463cebf8d8f74514852def08d9bdbdce2cd9621df928aa99a612a79b740ec1e7639806f5460388a008","ssdeep":"3072:VsGFKsbtzO3aD+ExcOapYH0eoutevdoi3hS5FYNmlmXjo:qfsbtzOSMk","tlshash":"95949248963202dba272769ede0672f4360e5503fa5745daf8d2c025eede7631cd232b","dom_hash":"domhashf01b4d67bc7fbc8f1877804e422722e2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wealthvault.cc","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"104.21.91.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T12:51:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"wealthvault.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-03","domain_rank":0,"first_seen":"2026-04-06T12:51:11.832316Z","last_seen":"2026-04-06T12:51:11.832316Z","alert_count":67,"request_count":67,"received_data":4014052,"sent_data":28599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wealthvault.cc/js/server.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-07T01:24:25.968585Z","times_seen":82737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/modal.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01861b2caefd0edb4036d14d286af607","sha1":"28e4b6995d616dde1977f0c36cee39a2d4e069e0","sha256":"45c023adb807350f56eb4f43cb992c2e6386072f69fcba4f1a0dbda8c9869a6a","sha512":"9a55c1fc75f42d432cc08879264008fa5bcfdbb8bc54bc1396884adc83304a10ca4a94e55b71febf06b4f5a1c9ae44e7e98133b4ec136b3a070ac6cb19148648","ssdeep":"192:XWjwI+1LBdwJ94z0z+3w8YV8v9Pv4FEp6karpEvFAzAgETrh9AC9d:XFI+1Lzwv4QK3C8v1y7k6Eqzt4F93","tlshash":"610230dc79c5f0a14213b479083f240af37a5e66a10eb4a4d296e4e5beb0d4d9423fad","size":8889,"data":"","first_seen":"2025-04-17T11:27:49.60607Z","last_seen":"2026-04-07T01:28:25.924373Z","times_seen":11823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/plugin.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e861c3c7aa3ae1eb067bdd021849fbea","sha1":"c24de7e458fde71de63c35e8fab145ec767b1424","sha256":"3fe032d2f2113e4e7bf80d77a320caedfa6a741c571af727aa1d266675c2d0ba","sha512":"9d2b19088a56e870b0dc1b68e8bee156a8e2931f0aca542b6d4b6dfb9b5a13154a594489b9ec15da2ee10064509377d7f066d0c854774046c47c89c6605e0b7d","ssdeep":"192:3M4ps70fNaZdhh0BSu5HSL5J78yLupOIFtlomlApOIltlomldlWaU1h1m/k1Ay46:3RZfNaZdheS+SvoAYWZWa+h1mM1Ay59","tlshash":"d25208e83185f0d60393d4f7827f600bf2f19838605da061d669c4d27e758ee9663e6e","size":13639,"data":"","first_seen":"2023-06-05T10:35:47Z","last_seen":"2026-04-06T13:08:26.960256Z","times_seen":606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/config.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a884a15710d698a405a645e228b4265e","sha1":"280e8af5cc207ea3b7fa4086c763cd18175aeee8","sha256":"53db5edb619c2e5e2ed4aac3a4df97080acf1f545eb8aea47909178217500520","sha512":"cc0cdbe1f1fd290a15009e5df4b753ff1beea5dc900180fec7edd6c537533da89a31c0cc76e02463744c9c9f94fa7ad0c0a1216c42d00488ff827da6a2aeb448","ssdeep":"768:jKHCIKIdJcxmufNWCMucEQ7MSpHgI0ddQ04PXZVEgnNmwk9iudbv0HrpzEPBQ+DT:jcHTc5NBNi0ddSHCT","tlshash":"37f2b7d43282b070d7e751a5507f554ab33a1aa5744e8040f23ddce93d7a98ad2b3f2e","size":36634,"data":"","first_seen":"2025-12-03T00:15:01.638097Z","last_seen":"2026-04-07T01:28:25.872229Z","times_seen":3204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/components.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c26766264bf5b7e41a0bec5ca5911e8","sha1":"9c278feaab40831a1fa013d7572152e1384f627f","sha256":"e2c08e32a0909b49bd3c7e28ce8826be64e3d93fa7f4a8a78cb014a3a671bfd1","sha512":"b60c0bc50d6d84c2742a9bb4832495bdf8e5676e0d28791d73c96103d8dda08e665d665b32022fbe5fee3809fae43240d5126f102acd531a9d3a3661c787b4e7","ssdeep":"1536:GIsqeU1vsHfE+p9GSCfBBjP7PEjG9ehIRRuKzUtM7pPDYhJMd6c6xmQCMrMtkqR3:tJSg7Bb7cCzjELc6xKM8kqRBc9inPPZ","tlshash":"16245c95b5d0b02a41d7a257907f2209f37c2e68681884a4f665dcec7d30e8d923bf7e","size":214850,"data":"","first_seen":"2026-01-13T09:36:52.092907Z","last_seen":"2026-04-06T13:08:26.948588Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/search.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11287ad1edffec6fd95526dfcdb9f723","sha1":"fb182cfdaa075a8c9fd513d2a535405d26849b82","sha256":"8dd8533a009cc53a4262e3a18bb69f18ddbb17f9201983845c14173d5f54a323","sha512":"9454be02fa3b758ff0418605dc0cb0d75f422b9cdb0380a3276a65c79a414f3f98e59e50fb912856bf27a1e52038e4a66b062ed5840e4c2fe4e3bee7ea7cc2c8","ssdeep":"96:84ZWAVsa7mtObr0bTLnPhiqkLDWqmEVVtCgtfitfBxHwXT9T786TtWshNae9jzG3:nWAVbCob4bTDPhsLSqmEtCSAHwXK6g6e","tlshash":"b9c1dac430c3f417276e1edcb8fe0526f95b8a89745d8480f6d6ac2638fa40ac036b66","size":5799,"data":"","first_seen":"2025-12-02T22:49:33.841226Z","last_seen":"2026-04-07T01:40:53.4496Z","times_seen":5570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/services.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b636667a19cd8889e206a9642f0e1406","sha1":"82407000695aa979dcc2d4a653bcf7ef88baa068","sha256":"4b83b03960bc052004c53ab913066a36dcb0e89f3f5c8a8f42c3952ed0c8e233","sha512":"51c0cdaef560b865b3a7d6888ddc53a2a55186136c79e29f1e9a5d282e9816fe5401fdddbccf9b3d2cc8c4e0d1d9973462b51f11dd23a70d966b26cbb31bc042","ssdeep":"192:ZVBtnesPF4WAwfVR4+HcD5zejDNPTPBIQ/DHEHMVOJht4Cew3gKVuvYsijc9fOyY:ZVBtndPF4jwfVCOcDsjDNZyfbtg8siI4","tlshash":"3442e6d5b10078b197db01da90ff400df2bd1422781d94f0f2a9c8f9a4b9696a237fda","size":12112,"data":"","first_seen":"2025-12-02T20:48:36.442522Z","last_seen":"2026-04-07T01:37:08.606344Z","times_seen":6802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/styles.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"523ec4885dbe79aaca0b0e9496b9425c","sha1":"c7dc88ebd0f19a87c7b970ab244f20af3805af59","sha256":"1402be9a94bfa394dbe60ec2e4a061be867f013ff201d37e07561890b5409dd3","sha512":"6bf2f944afffe56d598f76c37173ac6cf08802da97d682c3e67ec9579d8dc3f182512ca453a58689ab76dc3786843aac00d971a5580c428d49fff973e8d7dab9","ssdeep":"96:ILwsvCFDXdkPMEGbPJPqfA/O2RRR/OqsBGuN0DRcag/tmI9/tmIHtPA:qwsvGzdkPMEGRqo/91/OqeZT/tmI9/tc","tlshash":"0991936135c8788156fa44a8587f28c271ee5b95312cc4a0bb3d35fa7da788780277c2","size":4334,"data":"","first_seen":"2025-12-03T06:47:45.118055Z","last_seen":"2026-04-07T01:28:25.898951Z","times_seen":854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3688fd64c409264431201fa55a828e81","sha1":"2b7eeefaa1edf3a7621f7576b35b01c895ef5367","sha256":"944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6","sha512":"1393fe2f189899d68717be994820d19a7e89660ea5cd90cf4a2d3dd07b41c95c2f63a3a0833d2407f16be6a3eae698ab549eac52d4ffc82bcd2da0e4e46da210","ssdeep":"","tlshash":"bae026faea5a457101e6a1237bce739e293665a3a92a4c402899ce806838dd31126ed1","size":333,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-07T01:30:59.271281Z","times_seen":33049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55d564feae088e58d32e046f7759dff9","sha1":"4e5df5b4947c3464c653031bdfa1f5a94549ac1b","sha256":"aa173d917a72f87717a88ee6445f87eb2762119daeb7327412920e4d5fafbc80","sha512":"47ff1abc7357d71bf4b579715100f03525ff6647edc5d4bc793a4aedc0ee9d70098ce1a3ff5176d4d39d3b0aae47ee244a7b71e29626714cb6eaaf9dccea12d7","ssdeep":"","tlshash":"95f0c00d65354d789bfc044c08a51d830dac0087345747bee8e6f7200aacd1590d7a0c","size":538,"data":"","first_seen":"2026-04-06T12:51:18.572389Z","last_seen":"2026-04-06T13:08:26.967826Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/analytics.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15440554a31091f2b34694bf9862ead","sha1":"632020516606d6ff0a13a43bc263f512f09297b3","sha256":"b80d4052c055fb0ec0f2f32f2336b7b6010c18c8443f503182a982bc129f77c1","sha512":"b2bbfd753b8598fffac546197df7ac13fe456f49ff02a235826b57ba9d6c69c4220ef543aa9a66dc20c72b4ee97e49ec2309b1f4d724f302cc0c719df9d1dd2f","ssdeep":"","tlshash":"3601f4b02644a495263804d9980a21c3fb3c54389321f8f25bcc96bb71bc9db133d829","size":684,"data":"","first_seen":"2024-04-05T11:13:45Z","last_seen":"2026-04-07T01:28:36.520167Z","times_seen":16424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-07T01:12:46.567448Z","times_seen":294459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/gallery.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e6fc070dd8bb178c96ab34bf1e4e889","sha1":"d8a4fabae2de3a6b4a4f68dbb21485dbd5cc6f33","sha256":"447f0dd18a25834cd94d4d491cc8b580805fb94e5782b4f7987fce25e08d71d1","sha512":"43d8cd101b1cf5aa2c26d9ec21faf4527b280e3f0d4831b140f48eed8b6c037508108aa72aba4cbc810ab4745b2a314535aa03d3bfe0f56b8b4129ae7d676644","ssdeep":"","tlshash":"d921ed604032207200651adb4591f1c171c5b84ef9104be9a17add5e98ecb636ee2dbb","size":1380,"data":"","first_seen":"2026-04-05T12:04:47.090492Z","last_seen":"2026-04-06T13:08:26.963207Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/dashboard.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc5cd75d94a6b0224a00befd684bb419","sha1":"c46017689524b254a9532b431769d87edfa86a53","sha256":"59b1b4c39bb5e259893f4836f52d460617a6a6fe46eb149160025c8ecd27d0e6","sha512":"d71b62b9c15e077b59bd7dc7043b61401bb95d96e13057e53a1a325a64c3e75cdc4b61e0d0dcae3167665a7ab1f4214e123a4ef1914360d16876a2c4f84b0edf","ssdeep":"48:6XyS1kQcF8P32bUIP9I9s0nv2RGc+AuuSXu1A4WO4XuTIc6fXuvNbh4gZyDMPeXf:6/q8EI9sgv4SY0O4i+0NbNyDMPei+","tlshash":"8f91bd8003121d7bc3a36b9979d9b5443230456cc7e6d494c2b9da2e62a9cc77cb37fa","size":4472,"data":"","first_seen":"2026-03-20T01:55:57.513177Z","last_seen":"2026-04-06T13:08:26.952608Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/bundle.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14df4a80f0e6f12f8d8fdb5c61e8a91a","sha1":"a560113bae3e44dd7b24dc196bb633269a248da9","sha256":"e4d7770074594021771329a3e8a855fcf2bde2c15036b4b456aa430d083e4029","sha512":"9ac5625386833724711514221c67b65183343c5cc3730899cef8d012b50be40bd54ea0c458c7914b0862e38ac628e19a0691ab0548418fc57f65c6847e3f3e27","ssdeep":"192:bw8yrfyxNvv9rpXJ7ud6KKts9xHUzdo7aY6rsu71QMD8iSlSH32Zl+E:bLyrf8vv9rhsd9kqM/i","tlshash":"7ee14349a7b77a2f218bd1a7721b034b7579815f4024c24dbe5decf168b8e4a1133bb4","size":7303,"data":"","first_seen":"2023-03-09T09:22:16Z","last_seen":"2026-04-07T01:16:45.579132Z","times_seen":2025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/setup.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffe8bdb3ec54f993c7e9baee9d1ed9a3","sha1":"0e0bef568482e927c7fb19840010748de78155c6","sha256":"5653ad7b55bdbf5f3bfe2ba676d50c0642d7017322700ab1369149f231efd417","sha512":"fafb8f6f3e59ffef8b2dd3b2a80eee4812ac019d1dfff8ea8f55b8f1c8e51a04c5dc54e7518db4e985dfb3c8fb93634728dd8e72fd063abd97752c26d5e74b2a","ssdeep":"192:QGxvVeLC4bvbI0Ny4jL4eacD0sF0/d/mwYP16Dc4UQAOoXJoXqVQa/:zxvVibjIQEeacQy0F+wk16AnQA7ooQa/","tlshash":"b20294ad399f64c6d362389100ba5466e37b2b7132df80c69a1a6c813c3376713d2da5","size":8531,"data":"","first_seen":"2025-12-02T22:49:33.810249Z","last_seen":"2026-04-07T01:40:53.4096Z","times_seen":5767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/card.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6e84b49b20f3df8d67416886a41f305","sha1":"71048379dd0f9051a450352788d857bebd81b5e4","sha256":"fb78ff9eb3fd2ac10b035d0bd433777ece12657eac1d45a641c8d033b81ae1a5","sha512":"2dd2718e18826cee91f154d8bac14c35078a735a8dbbaa2a7f89727f4d7ddcdf5b7306afb7144fc73c5adccbf2f6789752679fd7ec16cd4b30ac68d74efe1650","ssdeep":"","tlshash":"c71100d1d48624e32bb3d853e12e94c6763a2208107eeba1b793f5e4106ead58163a72","size":900,"data":"","first_seen":"2025-04-17T11:27:49.599947Z","last_seen":"2026-04-07T01:28:25.889549Z","times_seen":12361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/defer.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0d5db3d15d7eaf72926eeeed6fadf55","sha1":"e5c5cad1ee44034a51613341e6564658d485cae1","sha256":"44d2b96cc3d546e5804c0796c94d82669750df31542b904a1248cbb1954d626a","sha512":"acc57f4e27c0537128723419c3796fcf93a266e87633b67e603883d4d6336ace82effcf5c38b28114bccb6c6da38c4138ee68598573d2f5a85cc981265430783","ssdeep":"768:MtPx6KoMcFDTHjE1opoKoRobujCvYXC1DlJtmxTwBYV72E3T92tfSrgVAzQmIFhJ:4Px69wkujCvYXUlLmxTwUwZSjWhdcNCf","tlshash":"65c271a662002a3604ff16e7f5deabc47671149fee0944115939cc1e29b8fc3a1f1af9","size":25779,"data":"","first_seen":"2026-04-04T10:07:04.255124Z","last_seen":"2026-04-06T13:08:26.940895Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/gtm.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-07T01:17:34.678483Z","times_seen":111159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/style.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f681b9ba77bf131ab6eed99ca0edd4d","sha1":"318a6d134561f63baa396f52f23f9f30afed0fad","sha256":"12b22bf7cba51b759f81c8d424d6e9ccf796f8fc5755d63bcaeaca48ec7dc9d2","sha512":"2f271635fe78e05892c3d18e3731b4c665bb99e947a5a942c912cc6af5bc96348e651e864175a882f79775a56ba2f67aec59e3b2b658da6c19dda8f5d4e674aa","ssdeep":"","tlshash":"2051d6d16571b1d473ba2090c02102e9f9aca65f2727b4f4f70ca4a4f56b5c372b253d","size":2568,"data":"","first_seen":"2025-12-03T00:15:01.46059Z","last_seen":"2026-04-07T01:28:25.910283Z","times_seen":3262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/header.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-07T01:12:31.470735Z","times_seen":691334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"263a10237b8a2746d453d6de33623108","sha1":"3f0ab2601fd2a02e7cc99f7fb194e210f988a266","sha256":"01c52b1340e072f4d6c10016f59d39615b7912ab8269cd47a93ca106015bb91d","sha512":"02feb8495f035fe10f128b90c1b3087f5f744a32e1854793ea776754957baffa15a60ae7b65a59b33b86e907ed786c66d8651f70945ade3b3035f05304467e4a","ssdeep":"96:whK5MuecDhmzzosrh2ww2wuhK5MyDhmzzwsrh2ww2wR:B5vecDdsrMuY5PD9srMuC","tlshash":"85a184f0e3ac20728162531847368ac8f1ad30f1fa0c6a95fe86ed4065b85bd05eddb3","size":4744,"data":"","first_seen":"2026-04-06T12:51:18.573353Z","last_seen":"2026-04-06T13:08:26.968344Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/ajax.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"568b51929c33a24f193444bbeb0b25dc","sha1":"1e03744bdb2402db633c85d2e64fdc6f2450c92b","sha256":"c276bef5e5341565a0a2e1ac6d73b5861439ac06fc603e8e0dd7f12ae4fac38e","sha512":"93d65ed63199ae99ceeba79bef3080607b627618efcfc3ce10249017a85918a502a6c3853e9e2268e41799888c224ec8cbc9b9d7b2e45fef580f3cc7f371c9f8","ssdeep":"384:5lCj3Kb93T1UHWWzq44BN1U3W/QOi3irO/T:5sj3Kb93T1Ch+4GN3/QOiSroT","tlshash":"8e8245d5b77d327a0bae115fbc95489d3f2c50e1340268f56cec895c18b889d8278fab","size":17765,"data":"","first_seen":"2026-01-19T02:39:58.805445Z","last_seen":"2026-04-06T13:08:26.95462Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/user.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f156add3be76dd6ee084dc63f8cfe3da","sha1":"fb1c1657fbefce2362f82265ae7a5d0da2e53d55","sha256":"ddfbc20b572338e84a5a632d52bb0d9224a8bb28d4a2a49e07e61797a92ffdf2","sha512":"4a6b842746aacbf08632be7fd242ccc47ac42cfb36b1620a367fae0514c94238833badfdd0aabef1b30a41baeffce547efa816c2866152b066b3bdc787e6c1a9","ssdeep":"768:KYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:7DFBQmTNfMR4X6DJ15vj","tlshash":"4013a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c3eb606e84886d77fa","size":43885,"data":"","first_seen":"2023-03-09T09:22:16Z","last_seen":"2026-04-07T01:16:45.613727Z","times_seen":2013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/pixel.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","size":10628,"data":"","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-04-07T01:28:36.448727Z","times_seen":25786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82f8248cf91b1516468433ceb34ae9cd","sha1":"025fe6cf7335c0140ab1665fbc73465ef9642425","sha256":"2b0095222f22091dded6f8ce9b5317a8ded6942d452b1cf0abff279e5d971001","sha512":"f83a97f8051fb7ee74bba16f62c63f4609fd16015ee24ba2567aa7ef884c5df4ffc9dbaf31c6e60da253e33c970911978ba65859b70c5c604450b1245287ce7e","ssdeep":"","tlshash":"bec09b014786d49145b05582075bbf0ef5d3900d654dd149d112cc15758dc53c55fffb","size":147,"data":"","first_seen":"2026-04-06T12:51:18.574428Z","last_seen":"2026-04-06T13:08:26.968905Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/fetch.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08207f7088b62e6096753736b01cc13f","sha1":"207367a74e6a6f32e5b1e9403b814d16480151a5","sha256":"443feed322344a434640a69836e166337b3ca74b23b3e5f2709743d6511cf015","sha512":"afbcb493319e297f53f6d8ed5ddabe89aee96948314607c214c5e6386d0b6a6b0a61fb1ccd2ec518aca6535512d7ae6acf1e106485ad787aef9a7a62dbbca57c","ssdeep":"","tlshash":"0331cfc9770c79b323e7e3a2916f710793371792a84a5c4028b2d8d13db5cb85367a98","size":1718,"data":"","first_seen":"2023-03-07T12:21:54Z","last_seen":"2026-04-06T13:08:26.938277Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/lazy.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","size":2212,"data":"","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-04-07T01:45:44.645925Z","times_seen":20948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/login.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c505252b24643d1cd4c12c05bb1c2e29","sha1":"015a8c0f682c6c074feb10774facdcb67362e911","sha256":"8027a5c64c0fe5132f2119cd1bfb824f10b51bde7a942233e80c3c3db6f4aac6","sha512":"853c0850caf19e5b5c80d0d5a47193ed2f89f52bbe6c1421a7950ed9fe3a1cc8bdba644a63ab9af42784d8392c4b08181fae962334a06541ea284204f180c29f","ssdeep":"","tlshash":"b611a2a031d275e1c1f858dd4416e042f1244a6736bdb5c1f30be8a17c11d9764f5c7e","size":1018,"data":"","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-04-07T01:28:25.815685Z","times_seen":14021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/about.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28a556f9cf1b7d6c7103aa5095115933","sha1":"60be8bed75737f6604e5e76bb4869fd969e270cc","sha256":"3845b91f347b44287b1fa198eb83bf717957447cc12e8fc47672c32218ec6941","sha512":"deebe403725d704ca497edf11855f0732a0e676b290b98c12070ad2546abe7de0b2a0984136fb2e1f9da6eecdfcaace3bfae877f0d2939024f10f7661a0aa5b7","ssdeep":"","tlshash":"ae511f79b378abb51eeb10766c097061bec14437236d51b2d94ee0ac3b81073cd6ada6","size":2833,"data":"","first_seen":"2025-12-03T00:15:01.475396Z","last_seen":"2026-04-07T01:28:25.952094Z","times_seen":3175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/data.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"519b3f4dd03d10db85d82d83721077ed","sha1":"d705fed38783398bf8891f1af6c343634929250f","sha256":"c9a3276f85bb99b1f2802822423a9856aade6863cd8724edf53587ae19cf5c63","sha512":"db0a316a1f0074ea59169446f7b2bb0ae11f6c23e3ef6dafdd1a8737583051acf5c23965ee7e9896a5a299e0bfba555f3f6e0e5f16e61fa2724fa6d1f412348e","ssdeep":"","tlshash":"863122d274b03199729f40c6493e028af3608f2d367954e073c8987cfa37def626890a","size":1661,"data":"","first_seen":"2025-12-03T01:51:42.307454Z","last_seen":"2026-04-07T01:28:25.837579Z","times_seen":2114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/checkout.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46e28272420acfe7670944a9b99c8531","sha1":"5c58c595a162108018cd53055b8b79aff88bd824","sha256":"5ccc63b1cb0156ff3458a8c52f2a40425e940ab1f8b0ae59b10bc2f9f873bc49","sha512":"9c540f77bc416e4d6890f6dbd539958e2874e6553d9750e2aa11274f3162b8f12fcde7a61c64e3b371fa4e011ee5476b15057eeecd4bf568911ab9301c6eecbf","ssdeep":"384:PJpPW2vYNJVF+4DDaHICH4JFKy5YtQvvAH5aE6/8zytG/woZABJM+jOJCSh8r9D:PJhW2vYNJVF+4DGHICH4JFKKYtQvvAHU","tlshash":"c042976430c2b772abaa14ed90f38145f3386845710b50b0e3ace8567c79577a2b7ebd","size":12598,"data":"","first_seen":"2025-12-03T00:15:01.547154Z","last_seen":"2026-04-07T01:28:25.797681Z","times_seen":3203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/ui.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0159c1f26fb0a8ebc5008949d423da4","sha1":"0a38483f79e33b7909126e30b9a0c0c1f139043f","sha256":"ccba79f0dd8ab2c52b3cda508a3e39deb976a70bee76a1882e9235a830e5552e","sha512":"61b5bbaef715ca6b0513125cb3c468e21174c0e8c1ea7762bd0b255c41cf0526e0c6cf39b2ba6128c595a7c35d7cfbc81df25ba6036f1e7795130453e4ddcba3","ssdeep":"3072:AGZDlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/DCD/DD/DCDF:dZ3Hg2k","tlshash":"40f4ff285a6bf744e808c0dbfa373d84c59dd18aa44765d20f755bb34ba2793ea9cc03","size":783699,"data":"","first_seen":"2025-12-03T01:51:42.311192Z","last_seen":"2026-04-07T01:28:36.504762Z","times_seen":2248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4cc94300e887c423c85a15b022a7601","sha1":"101f7b4fe25d5a7f5f7530829fcbbb4a4ca98746","sha256":"99dd817dd2565250e87394e2adf3b69650b65d442c23e4220e0836c9b9193cff","sha512":"03271842c0403420d49adc3b9752bb0ad4416acf64cffc61c45b1f983c67b90b8e73d26cf1770fbd194d80b18768d72a92fb10c07f592dafcad8f9596bb326da","ssdeep":"192:JuNwCOSp4jmdtTb/t2FhdwNCWVDBh9Mp6csdbStx:JuNwCOYvdtd/Mz0Y","tlshash":"eff1d75459d728f51e53206fab9f310534a300bb690aca55b8ac6a142fe09208b3dfdd","size":7717,"data":"","first_seen":"2026-03-20T01:55:57.567007Z","last_seen":"2026-04-06T13:08:26.969473Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/widget.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-07T01:17:34.659502Z","times_seen":109947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/custom.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-07T01:12:31.475187Z","times_seen":644024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/actions.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5097af142d9586d85d95b2804403b53","sha1":"7f5fc278d8d81ab9b80647f54a775fd685992d57","sha256":"c511927f2a10ede9d54252d0ce689e308eb042019a6fbaccf022a3db61d49726","sha512":"8d86b9abd02997e503f5088d75c792069995e624935b360f719cee0ca3173e9979ed22a70b9e85d70338d6046518d2271151bd1d93f6dc13e5aca887e6c88ef9","ssdeep":"","tlshash":"a2e07d512490ec9472bc00d5481614c2f111543c033274f10bc559b0a571c77067d872","size":303,"data":"","first_seen":"2025-12-03T01:51:42.367198Z","last_seen":"2026-04-07T01:28:25.864226Z","times_seen":2285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/mobile.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddfdce19fe37919d27ccf706a3ac0ca6","sha1":"0dbd7897ad2bca796310454d13fe261a26a75896","sha256":"f3140aa1b6fbc2ad0275f58fee765e39c49033c3fd45e5c35926b9d2c85149ca","sha512":"5f127a927d07f65c8cc80270ede33b1adda22e67ecea972c86fcca1e0d85c9f6f6c9724f5330d43e02dd44350a93f5d8f853d6b43c7ec30fd7134c19da832668","ssdeep":"768:SnRYPletyhrGmd3p+nlxYsvrDFRsMaVPjJGUhCm4Uqw9iDCIaUrgpk4IX18H6y1b:netKrGoErDFRsMaVPV3B4Pw9iaygpEXY","tlshash":"c0f219c93289b5b2468600a220af605af73769d4b04ec854f17ce8ea3c71d95a1f7f5f","size":37297,"data":"","first_seen":"2025-12-03T05:38:05.167519Z","last_seen":"2026-04-07T01:28:25.946435Z","times_seen":1739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/reset.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9e9982e508ea29aa1b0e9bf518347f1","sha1":"8fcff4ec0a3dcbb68637f344f896fe5d5fc312ba","sha256":"9555e9b0ceaf232287e0947a78608b79be15a3fd2a6483f6d61cee3abb889c5b","sha512":"e307dde9d7f53ae874bdf3569bfd516764cdc17ef357b52abf4ffd4399c0a68233b0998253ab189e9368cc124fd4a6acdb2943a87a24dd2e532b3d54707076fb","ssdeep":"768:xQPu3W0Os8l5NRNvKAadpyPSJXbID+3qHmVG3mWQY/feeUJqvExNWko5SSBk+:xQPu3W0OV8/UPprQYaNC","tlshash":"19b2c4d934d1f0629bb325a7887f0006f2390988340dc490e75598d97dbb9aee637e6f","size":25446,"data":"","first_seen":"2025-12-03T00:15:01.464929Z","last_seen":"2026-04-07T01:28:25.89456Z","times_seen":3238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee082a92463aff3941aa68b1607299f7","sha1":"6144f2eb8adc5cac19fe9c8a70fb03b39aa0ef7d","sha256":"48ced5c18521c62dc5e7bce41cabc3d23c68917ddadf5d8f13185ccc9cea2e3d","sha512":"6852bd67ca10ce0c65ac2ba5474e02857d3c83304a4f32e3e4a06a14e37fd0b80b60453024f40000ae9359138e0a958d679f84dbb875eccb8ff90bafac041cdb","ssdeep":"","tlshash":"ffb04c540b86cd4055e482516a0fbb19e8a3845d028530509811cc02208d843894bbf6","size":128,"data":"","first_seen":"2026-03-20T01:55:57.568369Z","last_seen":"2026-04-06T13:08:26.969968Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/libs.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f088aeff281792829c18b3120584599","sha1":"036575b5632cdc5033bd44b6dd90ab59530375d6","sha256":"6be3c1147b0af8bae5ef536661d17aeb6a838bf63579e3fdf48a0de74675244f","sha512":"a4c11150df26f8ec8f8aaadc75b95aeb1f41e0feef48cdadd8d707ef3ad151e8b7035954389d41b47a610492669e39944237a5158b3d7fd4fd936fb5119dcbd9","ssdeep":"","tlshash":"337132ae3f682d7502df17f264cf1292633100bff8064410a875ed9819bced617a69a6","size":3487,"data":"","first_seen":"2024-07-29T04:18:40Z","last_seen":"2026-04-06T13:08:26.966786Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/nav.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","size":1000,"data":"","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-04-07T01:37:08.602633Z","times_seen":22414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/base.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","size":128946,"data":"","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-04-07T01:37:08.60016Z","times_seen":22689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecd709a4e8a2d6e1dab41d290d248c22","sha1":"6288a1d4baae108032d5f9151c9094c7b8df59f5","sha256":"cfc61ed7ad09a11ba3be987c5984313725d18ebab4762521c6f885e64de333cb","sha512":"31d8d3fa485dcd158de6cd49e5fcda7967b244cc24a1a855cba20bdb2e8eff7bde66a38635028ed21a7756b2431b4764f750690a537fe35fcc9c88c397d9beaa","ssdeep":"","tlshash":"d04122c8b647323f4683132406af6918b13fd9875049d4d5b87de8206f547991bbfec8","size":2031,"data":"","first_seen":"2026-03-20T01:55:57.569364Z","last_seen":"2026-04-06T13:08:26.974159Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d50e3d6750941d0fe5459cdd65417b76","sha1":"a28856def1dd0eb9459cefa3e8a95fdf58ff9a57","sha256":"4b87b6d28a9f66afdf21e4adbdf0cca1eaf3cc3df9ce24bdc8b3588c6d34b930","sha512":"97698655029fc377f04e8b921c2fbb7551aac2f3a9e273cd1629d58a364810cc70f621b63fede7cae0cff92387a433b731f63b501890a3ad58af85949d55190f","ssdeep":"","tlshash":"cb51152ab4273133043fb166578bab493535608ee482d81e742cc8892fd89513ff6da5","size":2535,"data":"","first_seen":"2026-03-20T01:55:57.570917Z","last_seen":"2026-04-06T13:08:26.97492Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43f0b77adffac945d1e61ea2a64a4a","sha1":"d4d06f678fa3906c0b22f0cab0607527ae1ffbd2","sha256":"0b2098db2f0730d4c397767b820d999b137d2ac9f5e0438334f6ecc31177a83e","sha512":"a38cbecd19da25a1a8bd23edfe34351ea71d5ac402f325f5305433ad1273d7c9c03eddad445b7c74e97529bd5a1a3f4959b3b8039ff13840178122f0cc68fa45","ssdeep":"","tlshash":"cd01c57772da557402cb117d21ae8f4979bea431290d8054d80db8702dfcc45867fe9b","size":714,"data":"","first_seen":"2026-03-20T01:55:57.571924Z","last_seen":"2026-04-06T13:08:26.975824Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/utils.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a255c08e0054eae664a789ebca4ea6b","sha1":"0029c9ba8d0cbe92ffd1261c28eea07ef421a005","sha256":"ea406bab6c86f8e0c6e65b3c0daa5e1c7d7bb3cc040f79264b10731d8a27998d","sha512":"5cb0f07da6f77dda5b6dfb7a89dfe3fea2a167532ed53cb211ef9545d220eb6902a19a6199c3895a88e8a70185c38bd12c4d899d20a2498d21029675ee86250e","ssdeep":"","tlshash":"996184da76417470527296a7663f4383b3394576389f50a0e635dbe1393898b03b2e8a","size":3382,"data":"","first_seen":"2025-12-03T00:15:01.462621Z","last_seen":"2026-04-07T01:28:25.906182Z","times_seen":3202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/module.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"017f192142e96889820666aaf442cd2d","sha1":"72ff953f9a48e5998c071604bd4c17230a1bf301","sha256":"9d80aa6bdf0cbf1d698df649307aee7f5873022c9bd19806bfaf24304fdc1cf2","sha512":"06305f650f06f115b491272500b9e99cbd56c3f45301ab6c14a6b48c37b7cdb065339df4055e8564f169e98a742720731219a06a903a1da297f40631da8432ad","ssdeep":"","tlshash":"9801cea07c9068f0296f408658399585f6642225327670f0f78988b9b571d56136ee37","size":792,"data":"","first_seen":"2025-12-03T01:51:42.354845Z","last_seen":"2026-04-07T01:28:25.785702Z","times_seen":2862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/popup.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3441db2e5557eb376162e813cc72ef7b","sha1":"741dd0b8ca79daff8e3660fac1ae4f13fd1c32e5","sha256":"74dda5bd9aa7fd915989733552449304255eff518a5191050674bb72687d6a30","sha512":"12d53b1f8711ebc49a45c8ca7eeefcafbb585b9745bbc3c4e5810de9ab8621060332ab1ea1ec4dd75a9b1c7e427b964f2b641bf45128369e3057b62370817b5f","ssdeep":"768:CHzJrvildboIzRFOWwvd3y+uuQkDjdVWGNTC1gxkO4fCg:qztivbocOWwTDBdVWITKgxkb","tlshash":"6243b3ce3586b11257b212b5086f050be33e59a9680e4d1cf508e9d97c79c6e427ffb8","size":58812,"data":"","first_seen":"2025-04-17T11:27:49.55038Z","last_seen":"2026-04-07T01:28:36.503037Z","times_seen":13585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"wealthvault.cc/","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T12:50:45.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9m3CPosl3BYfKIDcRjRXKT5kadkGuL6sXrWDJJmaL6H%2BPp8zkSlhK38wgvvP%2F6KwPheGtXyLFEEXxcuE5jqbPQAFD0vnyhIx%2BV34djcjqCASZJ0v2XM2l6lzkNRsJK726Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e80eb8bb99f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":415178,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56485)","md5":"36587fba95b478455c9c8e7af2a8e7b6","sha1":"0c1ba8f26d376abc5b665a2d9e134ab8504d4329","sha256":"7787489d0f569be9e7c08d11bbba824125acff7f2ef07aea5349e7e5d6ed1410","sha512":"53f8e5220c3e51fbfe6048b483c983c1d6748acc859cc4bc689262f7977f702b00ebbb10a8a3f42561b87bc0b3454c3cc029a176646c26a0c00f14b0c79584e8","ssdeep":"3072:hsGFKs/tzOJaD+ExcOapYH0eoutevdoi3hS5FYNmlmXj1:mfs/tzOIMJ","tlshash":"45949208963202dba272769ede0672f4360e5503fa5745daf8d2c025eede7631cd272b","first_seen":"2026-04-06T12:51:18.486352Z","last_seen":"2026-04-06T12:51:18.486352Z","times_seen":1,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":39,"dns":18,"connect":1,"send":0,"wait":838,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/dashboard.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/dashboard.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab40-1178\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXPkcCQ4eIVzdIaitSqZhcV%2F%2FhTlUb%2BRtz1w5mmtT0uxeRhtJeHxkFTWzId16YYLF81%2Blu25SEgXXBBppWift6jSm0%2FikOXSAMVD8a6v50fNJ%2F%2FGqyjP0MWnanwt1AHN4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e16b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4472), with no line terminators","md5":"bc5cd75d94a6b0224a00befd684bb419","sha1":"c46017689524b254a9532b431769d87edfa86a53","sha256":"59b1b4c39bb5e259893f4836f52d460617a6a6fe46eb149160025c8ecd27d0e6","sha512":"d71b62b9c15e077b59bd7dc7043b61401bb95d96e13057e53a1a325a64c3e75cdc4b61e0d0dcae3167665a7ab1f4214e123a4ef1914360d16876a2c4f84b0edf","ssdeep":"48:6XyS1kQcF8P32bUIP9I9s0nv2RGc+AuuSXu1A4WO4XuTIc6fXuvNbh4gZyDMPeXf:6/q8EI9sgv4SY0O4i+0NbNyDMPei+","tlshash":"8f91bd8003121d7bc3a36b9979d9b5443230456cc7e6d494c2b9da2e62a9cc77cb37fa","first_seen":"2026-03-20T01:55:57.513177Z","last_seen":"2026-04-06T13:08:26.952608Z","times_seen":5,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/popup.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/popup.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-e5bc\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sa4y%2Fshcx%2BO2EmMsyl5mBXAQMopvoWGSOGLU7YBAzs8N3IoGApYFc6eS3SxWOPvIeplLnDnRYIjpj%2B%2FX7FVmHhRQyzhi2LW%2Fdzam2ajDlARTbx0ZTOgsl60JTgAeg1k8Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb929e5cb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58812), with no line terminators","md5":"3441db2e5557eb376162e813cc72ef7b","sha1":"741dd0b8ca79daff8e3660fac1ae4f13fd1c32e5","sha256":"74dda5bd9aa7fd915989733552449304255eff518a5191050674bb72687d6a30","sha512":"12d53b1f8711ebc49a45c8ca7eeefcafbb585b9745bbc3c4e5810de9ab8621060332ab1ea1ec4dd75a9b1c7e427b964f2b641bf45128369e3057b62370817b5f","ssdeep":"768:CHzJrvildboIzRFOWwvd3y+uuQkDjdVWGNTC1gxkO4fCg:qztivbocOWwTDBdVWITKgxkb","tlshash":"6243b3ce3586b11257b212b5086f050be33e59a9680e4d1cf508e9d97c79c6e427ffb8","first_seen":"2025-04-17T11:27:49.55038Z","last_seen":"2026-04-07T01:28:36.503037Z","times_seen":13585,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/ajax.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/ajax.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-4565\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1SUYz1pMl5ND%2B%2FjRPgvh5Y%2FY5nTchHKVePAJdH6JDu2osxQ6J8TIG4FC7wMtCUEtVhknPYGp1FeKUB4syAuMAhLb%2BBsm6AUkfIgUcWBhRbIV38WyQDl9wf%2FgNAlay%2FwuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e11b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17765,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"568b51929c33a24f193444bbeb0b25dc","sha1":"1e03744bdb2402db633c85d2e64fdc6f2450c92b","sha256":"c276bef5e5341565a0a2e1ac6d73b5861439ac06fc603e8e0dd7f12ae4fac38e","sha512":"93d65ed63199ae99ceeba79bef3080607b627618efcfc3ce10249017a85918a502a6c3853e9e2268e41799888c224ec8cbc9b9d7b2e45fef580f3cc7f371c9f8","ssdeep":"384:5lCj3Kb93T1UHWWzq44BN1U3W/QOi3irO/T:5sj3Kb93T1Ch+4GN3/QOiSroT","tlshash":"8e8245d5b77d327a0bae115fbc95489d3f2c50e1340268f56cec895c18b889d8278fab","first_seen":"2026-01-19T02:39:58.805445Z","last_seen":"2026-04-06T13:08:26.95462Z","times_seen":40,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/base.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/base.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-1f7b2\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8yXLKiF2Bhf1%2BjKzSKCtrvoxnK1ueO8jLrqPoQymmB7QcP13M%2BF4ewEbWTcc%2F3W%2B89rg%2Bf6E8zRp9jmlqSn0qBxq0GLJGy8nr0LimUYssvO4tMzjCnU9zYwWQrMgicl2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e2eb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65295)","md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-04-07T01:37:08.60016Z","times_seen":22689,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/defer.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/defer.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-64b3\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAN00%2BPTYx0BhVMBgEYdFN3B2dD%2BL6TqovGazg%2BjJJBmIDZmDFeeaO5QBpFdoo4rcBLKhTp8HboudvuJlnQi9e0gIzYsPejxIC8zZOf%2F2TdpzR2ZBAD7Z5bbiJ2%2FE%2Fcfzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e0eb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25779,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25779), with no line terminators","md5":"e0d5db3d15d7eaf72926eeeed6fadf55","sha1":"e5c5cad1ee44034a51613341e6564658d485cae1","sha256":"44d2b96cc3d546e5804c0796c94d82669750df31542b904a1248cbb1954d626a","sha512":"acc57f4e27c0537128723419c3796fcf93a266e87633b67e603883d4d6336ace82effcf5c38b28114bccb6c6da38c4138ee68598573d2f5a85cc981265430783","ssdeep":"768:MtPx6KoMcFDTHjE1opoKoRobujCvYXC1DlJtmxTwBYV72E3T92tfSrgVAzQmIFhJ:4Px69wkujCvYXUlLmxTwUwZSjWhdcNCf","tlshash":"65c271a662002a3604ff16e7f5deabc47671149fee0944115939cc1e29b8fc3a1f1af9","first_seen":"2026-04-04T10:07:04.255124Z","last_seen":"2026-04-06T13:08:26.940895Z","times_seen":4,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/assets.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/assets.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsZmIPgv1D3lxxVK1ttyZlJ9euLGnq%2FoTYgT0eIm8j4iVCdomPGb6vSLc6spBeKbQPFqWC6jx6AkEIVgTTnLTvoPtM5q1ZWG%2Bw4aTJjql3CVAoM6rCOejID8jr3cagUA8w%3D%3D\"}]}\r\netag: W/\"69ceab42-80\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920d99b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"23ff020097a1985db6409a4a2bec3b0e","sha1":"91b49e43bd65efb1f61f74ac9922eb521ce06bb2","sha256":"43987a726d29b6c322587a352912252af85366188400f2227d6b752ff5e1d0a0","sha512":"69d7406f6f6f653743d231582c97a9220ab487e695c5a3f75a3a5ab2e178a0d251d26c9bff7d3eabc95936ff133197b9c12b55e144cfdb7d13fa94296e5fed26","ssdeep":"","tlshash":"14b0922b6680444df39582fad028760c920a7519d9cf069d2bda17a451560d80b2aa42","first_seen":"2025-11-26T22:06:34.334454Z","last_seen":"2026-04-06T13:08:26.9394Z","times_seen":78,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/pixel.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/pixel.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knMdfD2vdjYmPsEikBjjC5AmqNpHxXZWPA2qlplFtmi2yo9Fr9RC6cH11wENjWE3xyYz3iTjYtisPt1KcKcWGgCkGUYSEXiw1P0fAwGVJP8H2GNEbW%2BwrVJSm9cFQt%2BpWg%3D%3D\"}]}\r\netag: W/\"69ceab42-5a\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920d9cb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ae2e28ce3763b388bded9b2a90ed0ba0","sha1":"8a1f39ca5a61ee5ddb476816f5928c6091aa4a34","sha256":"0bac0ba2575ff4f9c7d15a3af27d8644fd33e2c40f6ae5bbfb264aff1806d77e","sha512":"da579da2f4255a372e4b90e85ecccb8969b067aadaa18a979a42d4883cf511de0cae2c467702a089b0fbdeb9d5bdb9544480f9f946dc0df46f0c9ce7afd56961","ssdeep":"","tlshash":"e5b01202920c5114d5e1125051783f18022f38cb0c19cc06020032d002df741060d441","first_seen":"2025-11-26T22:06:34.31422Z","last_seen":"2026-04-06T13:08:26.932111Z","times_seen":78,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/modal.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/modal.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-fe9\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qLVtLY4Ysq9MlI6yBPnhNQk%2B04GBhgv72h6LeprsSYvQd9RnrSLdbpjl24Vi0PEGvEkh%2F2Y4KCZLdX10n2xk%2BJnaJQ9ZW2rw3pXQqGK%2BUcqASh%2FFvowb5qhFZwWLB%2Ft3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920d9fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4073,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4071), with no line terminators","md5":"87d0a6bf4e5f8fdbdd165d0c3c0db759","sha1":"69d9b77b56476c5d5f45b4a3f11cb82ca3143b43","sha256":"29ed80cfbebe6826d85ca1f8c9d62684db4b0cf7fbded003cee71d503425ad1c","sha512":"acda21f435ed66a3707672b213a872e5f60d4519094f4f3c8038713ce0f3dac4a7f7e169db84be5aac1f66f23495550464246ea35f63b3a55bf4ca69a2c4d85b","ssdeep":"","tlshash":"2e81585929bb08cb443d82809fa3465a30cbb812993525c9f6e7c38c57cd2771ddc96f","first_seen":"2026-04-05T12:04:47.074681Z","last_seen":"2026-04-06T13:08:26.954065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/gtm.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/gtm.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-161d\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6QrThPxK6ULadHFIRmYVKVZzNvEULoI6RIWWIva132UMQlnUPjPf6w3G5onEdE3424hJl0FCsBIVwPIIwf42%2Fgwf%2BZ9ZmHzhnQuPLLvKYa5GHRqDbHuJdK6%2F%2FDGkqXUBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e10b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-07T01:17:34.678483Z","times_seen":111159,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/data.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/data.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-67d\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzmoUuh7YXAfAVADmGVZe9pVjz%2FPMnttxS%2Fg%2BvrGYGWj7SibwYGdKO217DR98H6SYaz1yM2MfzfF%2FTdgjGQcRgaaxGSBVntIQE0xcw74IU5Hvc3WsqIA8WwhsPh2Xl38gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae69b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1626)","md5":"519b3f4dd03d10db85d82d83721077ed","sha1":"d705fed38783398bf8891f1af6c343634929250f","sha256":"c9a3276f85bb99b1f2802822423a9856aade6863cd8724edf53587ae19cf5c63","sha512":"db0a316a1f0074ea59169446f7b2bb0ae11f6c23e3ef6dafdd1a8737583051acf5c23965ee7e9896a5a299e0bfba555f3f6e0e5f16e61fa2724fa6d1f412348e","ssdeep":"","tlshash":"863122d274b03199729f40c6493e028af3608f2d367954e073c8987cfa37def626890a","first_seen":"2025-12-03T01:51:42.307454Z","last_seen":"2026-04-07T01:28:25.837579Z","times_seen":2114,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/components.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/components.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-34742\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYfM4H%2Fm4RyRSjoyPNhNQffCmgvfO%2Fww2mqpUqC7IoeipNWlEksHy%2F4dQxWG5rrA0QuFwbEoscVLR5G%2FJ7zcAWkWZvQUeyOt7OE%2F3aLJyahMMLFHsEhybACipY0s6WzcGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92be7fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214850,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c26766264bf5b7e41a0bec5ca5911e8","sha1":"9c278feaab40831a1fa013d7572152e1384f627f","sha256":"e2c08e32a0909b49bd3c7e28ce8826be64e3d93fa7f4a8a78cb014a3a671bfd1","sha512":"b60c0bc50d6d84c2742a9bb4832495bdf8e5676e0d28791d73c96103d8dda08e665d665b32022fbe5fee3809fae43240d5126f102acd531a9d3a3661c787b4e7","ssdeep":"1536:GIsqeU1vsHfE+p9GSCfBBjP7PEjG9ehIRRuKzUtM7pPDYhJMd6c6xmQCMrMtkqR3:tJSg7Bb7cCzjELc6xKM8kqRBc9inPPZ","tlshash":"16245c95b5d0b02a41d7a257907f2209f37c2e68681884a4f665dcec7d30e8d923bf7e","first_seen":"2026-01-13T09:36:52.092907Z","last_seen":"2026-04-06T13:08:26.948588Z","times_seen":12,"resource_available":true,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/fonts/font-5.ttf","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:48.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /fonts/font-5.ttf HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/css/error.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16148\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:08 GMT\r\netag: \"69ceab24-3f14\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50p7DlB30hiHuB1s3IhsbCEjKCQeUEo99CSGdHqToS0dEQztRurmcsJeJYt1P5if%2FfXqJ7TpysuXsa6XZ04tUI%2BSDTP6mDX28UCtCdnWs%2F8uzkfTGg3mjG%2BYnSTscON%2FCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb99fed1b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16148,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 12 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409","md5":"891f6ba4349c741c07868dec22e012b2","sha1":"3c0d37e4941a0f54221ee4b6c5071872f2497eba","sha256":"66807e8e108c648c970aeace0886706f8c95c616f036529a4b628525208f18e8","sha512":"34c76f4beb754770e988f43bd5f0bd91676f8989b7b8198d347a4e37b61c61abd2dbf10530196cce903178a991aa5bd9471ee04e48722e33a07af6c201b099ca","ssdeep":"384:gBi+ctEpLlLko5v0zcVPvpQaHoGNK66y1I8E4Eh8NiNpSkkdrDZJb/icrsmMYJu:FmkoZ0zcVVozfAK3BE3ZlAYJu","tlshash":"da722a0be361c74feb2e6eb9a66073d509ddf839ba16430f70085e97e8df5908980315","first_seen":"2023-04-20T05:45:32Z","last_seen":"2026-04-07T00:24:42.721044Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":575,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/routes.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/routes.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-986d\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlFc6GcNlvDRJQMQqKvF1D650NoIuT7dlfergQRsO2IZVyeZGlDaEgqYVUYGAefDXI95k4k%2Fga9L2AA66S0oObq4RR5AWgQGMWn%2FaF9capDBLOwZJypfCXjerso%2BM9SQKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920da4b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38039)","md5":"4be10c3ba1120cabbf0b5b0de0033b64","sha1":"7a21fc38cfa57b4932cf7d7e53cc48793c48987c","sha256":"44e0144d70bc9d787d51dc2ff00a1d3dcc0bee5d5dde21162af15892e68979d9","sha512":"15d671b263fe63842801e9ae53fa81410983b4d7dad1daac3516c8a15266c5906bfb3d4ef2983a6c72630265950c11564f8857c5ea331ed7e4af1916aabd53a7","ssdeep":"768:eyHqMpqPi1HRxA6sF3yku/5ms4np63dFl5xJYo3ytJhdXfjk2W:eyKMpqPi1HNs9u/5ms4p63Hl5xJYo3yy","tlshash":"e6030060a9c43438702b82dd41f296e9717c75b2fe32057bbc2ad12ec5c62c792b7b95","first_seen":"2026-04-06T12:51:18.507539Z","last_seen":"2026-04-06T13:08:26.952035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/plugin.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/plugin.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-3547\"\r\nexpires: Tue, 07 Apr 2026 00:50:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3DpLVKo2PpdvRxiqfyr3PCyKfDXX829j%2Brs6zbqxvmd07INQUmZR25zMwQvdJU4ZQh9Z6nVlRVQJSDfSxKLGtXg3g3vyB1%2BkGCRrahREjL8hFWlv9wyFw2bxts%2BTiavBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e12b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13639), with no line terminators","md5":"e861c3c7aa3ae1eb067bdd021849fbea","sha1":"c24de7e458fde71de63c35e8fab145ec767b1424","sha256":"3fe032d2f2113e4e7bf80d77a320caedfa6a741c571af727aa1d266675c2d0ba","sha512":"9d2b19088a56e870b0dc1b68e8bee156a8e2931f0aca542b6d4b6dfb9b5a13154a594489b9ec15da2ee10064509377d7f066d0c854774046c47c89c6605e0b7d","ssdeep":"192:3M4ps70fNaZdhh0BSu5HSL5J78yLupOIFtlomlApOIltlomldlWaU1h1m/k1Ay46:3RZfNaZdheS+SvoAYWZWa+h1mM1Ay59","tlshash":"d25208e83185f0d60393d4f7827f600bf2f19838605da061d669c4d27e758ee9663e6e","first_seen":"2023-06-05T10:35:47Z","last_seen":"2026-04-06T13:08:26.960256Z","times_seen":606,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/search.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/search.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-16a7\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fo5B6hOWErvFxWyUnbzd1nVqmVGz1RR9E%2BRtlFJzTTVPNVKn44jzqNXYpypzxv50T2%2FmhwbbWAGx5AV8g1H1Vzdp0CRdrALbSv9OnYhp%2FMYGg5xDsxR5xbrp8Ez6vYoSww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb928e34b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5764)","md5":"11287ad1edffec6fd95526dfcdb9f723","sha1":"fb182cfdaa075a8c9fd513d2a535405d26849b82","sha256":"8dd8533a009cc53a4262e3a18bb69f18ddbb17f9201983845c14173d5f54a323","sha512":"9454be02fa3b758ff0418605dc0cb0d75f422b9cdb0380a3276a65c79a414f3f98e59e50fb912856bf27a1e52038e4a66b062ed5840e4c2fe4e3bee7ea7cc2c8","ssdeep":"96:84ZWAVsa7mtObr0bTLnPhiqkLDWqmEVVtCgtfitfBxHwXT9T786TtWshNae9jzG3:nWAVbCob4bTDPhsLSqmEtCSAHwXK6g6e","tlshash":"b9c1dac430c3f417276e1edcb8fe0526f95b8a89745d8480f6d6ac2638fa40ac036b66","first_seen":"2025-12-02T22:49:33.841226Z","last_seen":"2026-04-07T01:40:53.4496Z","times_seen":5570,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/analytics.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/analytics.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zITJ4rTrggFIvmMhXal%2Bl2eYCgl3uKN2QS%2BNEYSbg9vDeWMrC6KswCe9xhzkmMCA3Clx7nb7QN6azC3NCLobIveO5FMWL8%2FI6fcWm5iQ%2FxYxSUQRZfC%2FzA9sJsUDKCeJjQ%3D%3D\"}]}\r\netag: W/\"69ceab44-2ac\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb928e3fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (649)","md5":"a15440554a31091f2b34694bf9862ead","sha1":"632020516606d6ff0a13a43bc263f512f09297b3","sha256":"b80d4052c055fb0ec0f2f32f2336b7b6010c18c8443f503182a982bc129f77c1","sha512":"b2bbfd753b8598fffac546197df7ac13fe456f49ff02a235826b57ba9d6c69c4220ef543aa9a66dc20c72b4ee97e49ec2309b1f4d724f302cc0c719df9d1dd2f","ssdeep":"","tlshash":"3601f4b02644a495263804d9980a21c3fb3c54389321f8f25bcc96bb71bc9db133d829","first_seen":"2024-04-05T11:13:45Z","last_seen":"2026-04-07T01:28:36.520167Z","times_seen":16424,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/axios.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/axios.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab42-419f3\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZyrQOHnnEJJM9%2FE9v4wL9KF8rrLxtn%2BF9dxwRdNg28rGA2f3pDgDHVESFpaKrwF5Vp6B9DKTah7%2BEaWVYNwE8txZ57JJCUEnaGMsetV2h0CvZShyW%2FMACaPGHkVkNpZXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920da0b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19943)","md5":"47c5a953716085fb092eaf219ba77106","sha1":"af903e4a0feac35b284069c879dffcceae5fe708","sha256":"8a8a8630915c293b088a46ae2f82dfeb6c6561fae389e9e104d36002cae70ebc","sha512":"78984b4dffb16af27edd7d53921e73e421cf2171595b163527a781d8d4f990d2f9d418076c475321351c50d045085dca487c2691e48750ab10eb1d4d320e6b4a","ssdeep":"6144:kvhONh2hSM3Xbm66uhnmU5z/ZQbQYYGSnFLrlYHIdY71HdvlDB9G9:kvhONh2hSM3Xbm66uhnmU5z/ZQbQYYGE","tlshash":"054441ad5a3303cb913b860d7dcd65c477688a11a31346eae990c438aece5970ef1b5f","first_seen":"2026-03-20T01:55:57.525474Z","last_seen":"2026-04-06T13:08:26.93296Z","times_seen":5,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/about.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/about.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-b11\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6to6bW7KMG8hIiIiLGQtQ4VhN%2BixD04Ed7fFl2bShb4NiiymumKX8rSlJrTxAS7wnTkcIrkNGftcbW5qP51NFmx8NuuZjkCzXiDU7vdFCr3PHQHpCexb%2Bq2tx73y3dQjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae6bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2833,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2798)","md5":"28a556f9cf1b7d6c7103aa5095115933","sha1":"60be8bed75737f6604e5e76bb4869fd969e270cc","sha256":"3845b91f347b44287b1fa198eb83bf717957447cc12e8fc47672c32218ec6941","sha512":"deebe403725d704ca497edf11855f0732a0e676b290b98c12070ad2546abe7de0b2a0984136fb2e1f9da6eecdfcaace3bfae877f0d2939024f10f7661a0aa5b7","ssdeep":"","tlshash":"ae511f79b378abb51eeb10766c097061bec14437236d51b2d94ee0ac3b81073cd6ada6","first_seen":"2025-12-03T00:15:01.475396Z","last_seen":"2026-04-07T01:28:25.952094Z","times_seen":3175,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-7.jpeg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-7.jpeg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab28-13240\"\r\nexpires: Wed, 06 May 2026 12:50:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KoAVKtjUlRj6npMR0aqERxylEGb%2FMMtlY%2BJaWW9SB6P3GiLv0aqKNnee8bxjpukFwC7MOh4Iu3OMOVoKlysWDZnG5Afsc9T9zuf0zTwIvDugG7aXXOB2GfaNgbx6VoXZuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb925df9b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"353e2f9cf659beb6854714e6d811cc99","sha1":"b7f76e5d7df0702ee326b0e81ee1634b6a043bcf","sha256":"c1df2b2564d326796e74a058bcf1c3e5f40d68035a93209d4ca5428a522ea746","sha512":"5d7887b3797c254ee867d05d2fcd02698b9902d2c51bc865e9ac4f1e0383f941a7cf7151c90583641bbc3598160b989fc3ca798d47c2fecc554b77466028f6a7","ssdeep":"1536:hm9LMLNBxGH2WJqtbaxK7l36Gf7t5PfglQ4i3wLj1tK:hkohBLBd33fB5KQ4Gw2","tlshash":"537312f67d51c315d6a222312ee193597f17810b9b38d6e03e7ba12b2b133c22e6e461","first_seen":"2026-04-06T12:51:18.513376Z","last_seen":"2026-04-06T13:08:26.933525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-9.jpg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-9.jpg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab28-14663\"\r\nexpires: Wed, 06 May 2026 12:50:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pirCGU56lERre5LdGBIclxwS%2FlevPinClko5eNumQP0JRlkzkPhOrRm0cH5o1i7%2BDkVBGdzCjONas2ty%2BdzFNczVqqAEVg04qX6m5%2FxQtqcoA5ycoHbyoL4Pv4VReAG9zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e01b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 362x400, components 3","md5":"694181e2d9eaf93b38600e0d6b7ff41c","sha1":"9a2a734eb67b18d21e53915245206411c9d0c39d","sha256":"ffd0e00c255d9bfae1d8df1280d8a3dc97d18a1c6499b302d9c964aae6b0be8b","sha512":"55b7d1bd2d914359945d3bc910aaea7a22798e8e1ced13ebdb7de546f177c00ba5ed8a8d32333c120383e1420f970a749123cc383093ea5c0ee3350c7af988a0","ssdeep":"1536:n5gRQjsAGjdigVZJJ+sjdUTrZIRSPQ+6kNEf09bSpVdjw/9lfvws0wrUJd3:2GjLGjgghXUTLQ+y09bSFjw/3fvLVoJl","tlshash":"3383021b1b50f058cf066616ba96e7d770263beab1405c45917345bfd0a78fbbb8808e","first_seen":"2026-01-13T09:46:19.557555Z","last_seen":"2026-04-06T13:08:26.962629Z","times_seen":3,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/fetch.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/fetch.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-6b6\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3VyOEkr7I%2BsJHPFsZUlkPEgG6nGsBazoAt8DIhAhiZ%2FrylwbJ1fWA66gp6SHm7HaBw9eWJUh8usEYSIaHrRfE88xOiau7CQZ%2FKEMHzFQDg%2FpL1R0zxBOYIsb8IYKvNHr4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e08b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1682)","md5":"08207f7088b62e6096753736b01cc13f","sha1":"207367a74e6a6f32e5b1e9403b814d16480151a5","sha256":"443feed322344a434640a69836e166337b3ca74b23b3e5f2709743d6511cf015","sha512":"afbcb493319e297f53f6d8ed5ddabe89aee96948314607c214c5e6386d0b6a6b0a61fb1ccd2ec518aca6535512d7ae6acf1e106485ad787aef9a7a62dbbca57c","ssdeep":"","tlshash":"0331cfc9770c79b323e7e3a2916f710793371792a84a5c4028b2d8d13db5cb85367a98","first_seen":"2023-03-07T12:21:54Z","last_seen":"2026-04-06T13:08:26.938277Z","times_seen":774,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/pixel.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/pixel.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-2984\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmzRVuLNNgqpyBIQycsi3z35T1I8KjjygRxBEHP%2FLx7RJXR69hNFXrYD5e50FcygIaMral%2FdyWQ4mFauMSSJKQSAnEKdpfoyShHuXmWR2wyxitlDn%2FPEsq6Q07Gw8U9y%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e2ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10391)","md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-04-07T01:28:36.448727Z","times_seen":25786,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/style.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/style.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-a08\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5Ud0GmOnHWELK8UHaZSkGLd5Fgy%2FciSX%2FCbFfYGK0dw4I0JYC84jonpTYmyKZFgVujH%2Bd6hAEjyLL2eokPDAeTHMHiBVgnCO8uIW7mPHsIBI%2FV5VzjP7ttyPJAWAeMQEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb929e50b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2525)","md5":"1f681b9ba77bf131ab6eed99ca0edd4d","sha1":"318a6d134561f63baa396f52f23f9f30afed0fad","sha256":"12b22bf7cba51b759f81c8d424d6e9ccf796f8fc5755d63bcaeaca48ec7dc9d2","sha512":"2f271635fe78e05892c3d18e3731b4c665bb99e947a5a942c912cc6af5bc96348e651e864175a882f79775a56ba2f67aec59e3b2b658da6c19dda8f5d4e674aa","ssdeep":"","tlshash":"2051d6d16571b1d473ba2090c02102e9f9aca65f2727b4f4f70ca4a4f56b5c372b253d","first_seen":"2025-12-03T00:15:01.46059Z","last_seen":"2026-04-07T01:28:25.910283Z","times_seen":3262,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-3.jpeg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:47.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-3.jpeg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:48 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab26-cd73\"\r\nexpires: Wed, 06 May 2026 12:50:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLUm%2F5oACm9MGGVCZ00V39Zku6Y8YhZsDQWcbkDXsJZF7lnMsJNxl7DCx5CKbl5mfR3LIRzeJA4BPtbRjGVvKZYqFxZbSac7fLH4Am1QNcMeg%2FVBuJ1wgcn5G9yapjybGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb99fec6b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x720, components 3","md5":"9e7bd0d52a6e7836e86083f7ae528c93","sha1":"32fba94a71856d53fd9236e578dc7a67e464d418","sha256":"5a4753ef92bbec45d326b03a57d7544f9ff956fc2bd1c37503973788734d01ab","sha512":"dfb5ce3ce6743c4e1457ee2fafbc587eae86b13bb02cbdd7b3ecd447601030dced800d4b6ad4af5cab1ae0a753011eb28da526b7bbf90c0e48bd47ae5fcedd20","ssdeep":"1536:pKQfyjgOwlfgPCNa2QSSxUg6FMu5y6IHnj2OWo:cAyggyG6FMuBnOWo","tlshash":"f63302273b065e92e3d734fa8743151f9e08c274d7ae839061e3e64a1198eb1b58dc6d","first_seen":"2026-04-06T12:51:18.517674Z","last_seen":"2026-04-06T13:08:26.957659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/fonts/font-4.ttf","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:47.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /fonts/font-4.ttf HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/css/error.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 55064\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:06 GMT\r\netag: \"69ceab22-d718\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lW4wzOlYc7YP9QiP%2F0FghaNRS1dtmbblG8uZekLXMA6RJDsbL2ZKJQJ6K%2BCDS0AxxGTzZCVa2wiKsmjTXI2gUKpwvFNGYKXBzhN9gDY5z5wIoIHc4JG%2B3cjns8DKW08rCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb99feccb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55064,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409","md5":"3b3f2f137f1571bb60f305ede16e3b34","sha1":"412306adcecfd3b2a4be2b961764020209cc6e87","sha256":"6e323a8731b68da2715b3610f7595cdb1a44101b40b46316741ffe15d9782e38","sha512":"dc3fe038b8167a3379a66a7e5f6f1ef19652b6f28e67fd0974ee2e0b0026734aa66b14542b5cbcc0fb32cf42c21556cbb5c02b4ee4fbf294b55928c2d593e088","ssdeep":"1536:rp8uLdDfLGy+w+B3lN9Tjae1vzIeNRFFBMs9:dlLhjow+DLjae1rVNRLeW","tlshash":"55335c22fa419709e40a3d790ea6e376d678f82d7ef7070a604136b3b9ce5801d7e6c1","first_seen":"2025-10-22T05:38:50.480741Z","last_seen":"2026-04-06T13:08:26.942617Z","times_seen":14,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":548,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/seo.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/seo.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab42-b3bf\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0jO6DoirTFX%2FLk1hU1psuDiFTNanu58oJ46JhjZdMXUol23O8M%2FBwTxXY4FNQx3PXfV%2FyPAbAb6OMoqQt6KtZTsfKtsgXDFKJ8WxGvrHFrsVP2lBL6fsphpRgVp9hd6XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920d91b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43932)","md5":"b12578adbba81e15115ebbc6fc17d277","sha1":"83b5d3e7b70c3fb58a7b88827a8e57806346da64","sha256":"2c7ce8a03cdf72e40ace2d825dcd2d4e4a24df086436c11a5aebc77592f5f5cd","sha512":"90f589cf8453bb8576d4b037559119a36ce3c86089b07ae3ba45f900196467fe6958585431cf5e3103a0da03a7c1f891a37c350aded61f564836bc5c968cc397","ssdeep":"768:7woDO+nETFvpeSllnk+FHkhoUlllLLBjP2pYj0w0KjaxYHk9TUlAm/6jJm2a7Zk7:HUaoa3Hk9TUlBsJu67","tlshash":"b723f86056d039292233863afadabd2826594311df0b66e0f763c76fcde54d3d972a0c","first_seen":"2026-04-04T10:07:04.281579Z","last_seen":"2026-04-06T13:08:26.959255Z","times_seen":4,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/header.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/header.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab42-4efa\"\r\nexpires: Tue, 07 Apr 2026 00:50:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ols5Jq4PyovKKs372L8Mne3Sl6hCiDSaBgIfYyNrSQSEsSI5w7x0BRgQEbIGWK5NDN7Hhjr8ZvvsTN89hvPuKhcKD6hLW6p9jXRRtMtDfwE9ULHg4O1CWLaA6WFia30Kyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920d8fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20183)","md5":"3e9462f490a54c4e4c639a99c940bf58","sha1":"8bffddc6927c8b95f155382f6f3d528eb19eac08","sha256":"bf7dc7ec7d782db68a5314bbeadd40dc9340cc8974ab607b3b3720b1976f7680","sha512":"3fcb7bb859ad8805f0fc24753502ff054267251f79381960efb15e5923055ec7c56513e7f7a9881d671f09d9e174adec0e4f33ddfc30c3e641fea0ef9731f310","ssdeep":"192:/d3YF4xB2/IPgQD7A7OgJ9Uafuxe4wyE3Jq1/heUMXvlY3EdN7IgQX+qqf9K0CGB:/KGg99UYG0UMy0wqfQFsHpRoo","tlshash":"1a92ed51deb83f8859f6c5e199cbf2b71ab94921b583cda8f036595400873270ebfb06","first_seen":"2026-03-20T01:55:57.515149Z","last_seen":"2026-04-06T13:08:26.943265Z","times_seen":5,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/error.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/error.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9fbOBSebuBNK%2BA7cT0tnuBS%2Fc3eFlIuVZCeRhhk8kYBnyHWrJE5wlRLA5Kq5svZHSem78P6blTfDbS0pOi9ksbDyTTfRzMBXro5hXZxwYSbfQ0DnwuOGqy08zoJAC9Glw%3D%3D\"}]}\r\netag: W/\"69ceab42-1e0\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920d94b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ff9be42b7be7f7d8087cfcf559ad5b2","sha1":"78b3f4aa54dd0be798af8bf3b305d895762d5561","sha256":"12bad02f05b53cc9a601ea8849cec55bcf42dd4123a773447f4acacf892342e6","sha512":"ee56fd5db1bcdaf40b9091507e1652ad66a6800a187d842bf9bb1ea44818c1b26b2b0d85dbd328879925695ff5973939ea1d103b8831b2cfdcb8222d0de59ab1","ssdeep":"","tlshash":"93f0ec600129a611d9511d9f73df6f296d5c14083152d6bf07790ce59eef4264340f5e","first_seen":"2026-04-06T12:51:18.522408Z","last_seen":"2026-04-06T13:08:26.936655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-8.jpg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-8.jpg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab28-1ab30\"\r\nexpires: Wed, 06 May 2026 12:50:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U85%2B4QoRhFzKJ8pjH33MTAITLCMoh7GFjzJvA0Pef3Y3HOi5N1NK2MZxuRCPX2VWFH8pKbSy4VSl%2F8zwvtg1SXv9%2BAnL2BXpB6QqrU1pbkn14NEGmAsUoGKIOP5r8%2BRy1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb925dfeb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 362x400, components 3","md5":"44e2830d46973d4e9714ab75eec03e66","sha1":"3091febbbc66203f4857f2a4ee0582811de6fc87","sha256":"9f1dcd435d6523b53d97635351a02502b4be51cabd964b169688bfbf8336c8da","sha512":"0c2a966b3b4f71cedb7dcfb77164709b38b189ab334c1137818e17222345a170611c09ff3d55ddc3005ec519dd76f24d781fcba9bee32f507d2c0d2b759f7430","ssdeep":"3072:NpKvBZlHKnwcA33tUSr/CvUt/a3sgyAryr7:fKvB3HmwcAntXr/Cky3bq","tlshash":"82b302bac2ab67bbcbfd00d4c16fdd5eb38a951c46e41a050435d340c24ba5fa3a5d2d","first_seen":"2026-01-13T09:46:19.540604Z","last_seen":"2026-04-06T13:08:26.949933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/services.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/services.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-2f50\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bveRVhBQ6xTelnG5uWR7W%2FBKhIbu3hUqm1DVF4E1iCL2QHJHX3CIBZv629YnjNpHzVaMtpA5FPykj23vf9ob9ih0Y4QQBhrr7Nt3669%2B1qYFuTqx24MpOKDDqc3GcTKUeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb929e49b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12112,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7568)","md5":"b636667a19cd8889e206a9642f0e1406","sha1":"82407000695aa979dcc2d4a653bcf7ef88baa068","sha256":"4b83b03960bc052004c53ab913066a36dcb0e89f3f5c8a8f42c3952ed0c8e233","sha512":"51c0cdaef560b865b3a7d6888ddc53a2a55186136c79e29f1e9a5d282e9816fe5401fdddbccf9b3d2cc8c4e0d1d9973462b51f11dd23a70d966b26cbb31bc042","ssdeep":"192:ZVBtnesPF4WAwfVR4+HcD5zejDNPTPBIQ/DHEHMVOJht4Cew3gKVuvYsijc9fOyY:ZVBtndPF4jwfVCOcDsjDNZyfbtg8siI4","tlshash":"3442e6d5b10078b197db01da90ff400df2bd1422781d94f0f2a9c8f9a4b9696a237fda","first_seen":"2025-12-02T20:48:36.442522Z","last_seen":"2026-04-07T01:37:08.606344Z","times_seen":6802,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/header.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/header.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-15601\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twG6YNO32ORkrL6bEY5atQ2tHNuBBZZg2GS%2BdxPMgJUiHqQYxZwihgsASeWcRzwx7t3LNcHat3KG2M902FMQjMp8SRodTwbZzvh%2BK5MKrqm1IwahS%2BxIayxExMHcKsOS3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920da8b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-07T01:12:31.470735Z","times_seen":691334,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/setup.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/setup.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-2153\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FvIOvK6XMyP%2FwzUlMfFDZYJ0799pShTnzMRga3iAYYMXkIK19Ii4JdsjdqMCunbgzbvYoHzdPzlyRr5jCiF%2F8Bf8fPwu0X8dEXbNTCRGe%2FGPtrgsj1HfCSA2gRqSeJ4qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb928e32b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8531,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7893)","md5":"ffe8bdb3ec54f993c7e9baee9d1ed9a3","sha1":"0e0bef568482e927c7fb19840010748de78155c6","sha256":"5653ad7b55bdbf5f3bfe2ba676d50c0642d7017322700ab1369149f231efd417","sha512":"fafb8f6f3e59ffef8b2dd3b2a80eee4812ac019d1dfff8ea8f55b8f1c8e51a04c5dc54e7518db4e985dfb3c8fb93634728dd8e72fd063abd97752c26d5e74b2a","ssdeep":"192:QGxvVeLC4bvbI0Ny4jL4eacD0sF0/d/mwYP16Dc4UQAOoXJoXqVQa/:zxvVibjIQEeacQy0F+wk16AnQA7ooQa/","tlshash":"b20294ad399f64c6d362389100ba5466e37b2b7132df80c69a1a6c813c3376713d2da5","first_seen":"2025-12-02T22:49:33.810249Z","last_seen":"2026-04-07T01:40:53.4096Z","times_seen":5767,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/shared.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/shared.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XybFuM5iu89Ey4ZKD6pDo20zYa5wtWZlvxP7ceD%2B1EZj68v8y5FRgSbfkfB5e9lvTgELDULV5Xzlis16ngEmOgxQUbRwdZx4xyem6wQgmsxTMJ0YCiOEqwtZxvKYRrU%2BLQ%3D%3D\"}]}\r\netag: W/\"69ceab42-1b7\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920d96b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (438)","md5":"6449d68f905556cc6d83e232ddc84cbc","sha1":"c5c74317703ddd23e04f0ef974527e2c741435ef","sha256":"0da0f4efeb8dd5dbae895266028643312e8ea11c84157daa5adde3824116c5d6","sha512":"bf6323f20845aac377305a7cdbfd99851036ab85dee5c71d5051d460d840c46dac695c3b815dd25d080adc2303ed862433cff8b99f95cd37c9f4afa695a82072","ssdeep":"","tlshash":"68f0657da501d6369c37fb50329d66489320d78999ccab84130060b133c7ae0beb1f83","first_seen":"2026-03-20T01:55:57.524374Z","last_seen":"2026-04-06T13:08:26.943803Z","times_seen":5,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/setup.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/setup.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvCKVKhnwDmZn9CMVF%2ByFyydPiL20VqdhkYDFELjFtUpj%2BpMfvqChzNhy%2FoPrONLRKxJ8jLpryK5xvNClo%2FhcZhd8EPnlg27xdZzNg2COdFL75RSjQ9q0XjfjGIwheTGVQ%3D%3D\"}]}\r\netag: W/\"69ceab3e-158\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920d9db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (344), with no line terminators","md5":"b52d8131503cd95c4ccfa7077e6f59c6","sha1":"25992c38f4fc82726e2e4fb4914152afdd5799cb","sha256":"70632b2d182efb1cd50db1efc964588103fea058b8547fc78dacc544ca53963b","sha512":"c4d59e3e0d7af355b2ca56625c79a4a360f1805cd02e9fd37a193eaab704bf41846f55dd523a545c6ce36e03086f6447e7cb8b0191c54ab5605b322558d5245b","ssdeep":"","tlshash":"3ae0d81197603593c0e3630d1ee452586138c900eaf21cdee204d342e6cb5412cf3bd7","first_seen":"2026-03-20T01:55:57.542701Z","last_seen":"2026-04-06T13:08:26.949077Z","times_seen":5,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/custom.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-3509\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYWtVQi%2FWbeOMZ7AyW32bkCVRkq8ITm1e3IXhwwgb5BKqR0e7hCG%2BT0a1IlHXfmulSR8wCex3CGgMSjyQGzortViq%2FdghhSAiA8IlndUD5kSd7JGM38fV9QA7nyU2QbvtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920daab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-07T01:12:31.475187Z","times_seen":644024,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/gallery.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/gallery.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-564\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOYttqHj6BiPX7vRVzjFhdqGydgI7EDjQXcWDdG3tyvE57E3pyrWY1NoDQgQ%2BR2O%2FToEL%2BTkBZM3EeoO7diFqDmWMWOLI0f6McoT%2BKN7KT8FUJZN35bV55YkTBcHaXcBhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e17b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1380), with no line terminators","md5":"0e6fc070dd8bb178c96ab34bf1e4e889","sha1":"d8a4fabae2de3a6b4a4f68dbb21485dbd5cc6f33","sha256":"447f0dd18a25834cd94d4d491cc8b580805fb94e5782b4f7987fce25e08d71d1","sha512":"43d8cd101b1cf5aa2c26d9ec21faf4527b280e3f0d4831b140f48eed8b6c037508108aa72aba4cbc810ab4745b2a314535aa03d3bfe0f56b8b4129ae7d676644","ssdeep":"","tlshash":"d921ed604032207200651adb4591f1c171c5b84ef9104be9a17add5e98ecb636ee2dbb","first_seen":"2026-04-05T12:04:47.090492Z","last_seen":"2026-04-06T13:08:26.963207Z","times_seen":3,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/bundle.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/bundle.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-1c87\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYZp6kRqq%2BxsvC5OlO4u9i8ftbz4gFpXjKn2tcYsohLH6SVDbTtM7RMKacIB9A8pt1n4y0y2KFEYYiyVvB%2F7W3ekym4YzzsEuwFiwD0lJ3ew4%2BcAoo4yWC0ljOaS4JSv7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e23b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7303,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7120)","md5":"14df4a80f0e6f12f8d8fdb5c61e8a91a","sha1":"a560113bae3e44dd7b24dc196bb633269a248da9","sha256":"e4d7770074594021771329a3e8a855fcf2bde2c15036b4b456aa430d083e4029","sha512":"9ac5625386833724711514221c67b65183343c5cc3730899cef8d012b50be40bd54ea0c458c7914b0862e38ac628e19a0691ab0548418fc57f65c6847e3f3e27","ssdeep":"192:bw8yrfyxNvv9rpXJ7ud6KKts9xHUzdo7aY6rsu71QMD8iSlSH32Zl+E:bLyrf8vv9rhsd9kqM/i","tlshash":"7ee14349a7b77a2f218bd1a7721b034b7579815f4024c24dbe5decf168b8e4a1133bb4","first_seen":"2023-03-09T09:22:16Z","last_seen":"2026-04-07T01:16:45.579132Z","times_seen":2025,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/server.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/server.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GoNbu0GBYf%2FOcI3LuQFlxSfcAS85671IB%2Fjr33JhLGZg6cTvk67rUpbUMga%2BqGCQe6%2FFnOXVifWHWiwyhfgSH54d%2Ff5FVpkoLtgnzkENztPyJv%2F4wYI0uoy3jLIse5yOsA%3D%3D\"}]}\r\netag: W/\"69ceab44-1c9\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb928e3bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-07T01:24:25.968585Z","times_seen":82737,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/checkout.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/checkout.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-3136\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVUfG6EUxkTQfeJOQCq4pqauLLSbktrZQiHL%2FWfTmnVy03PcuYqgmEuCSAlh%2B%2FmZa5FumJ7V4hZY7J%2FBOJse5oD4AM6WoV0ZVYi3ywnpKziQjd6Wy45%2BUDN7eCbFKZzJcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb928e41b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12561)","md5":"46e28272420acfe7670944a9b99c8531","sha1":"5c58c595a162108018cd53055b8b79aff88bd824","sha256":"5ccc63b1cb0156ff3458a8c52f2a40425e940ab1f8b0ae59b10bc2f9f873bc49","sha512":"9c540f77bc416e4d6890f6dbd539958e2874e6553d9750e2aa11274f3162b8f12fcde7a61c64e3b371fa4e011ee5476b15057eeecd4bf568911ab9301c6eecbf","ssdeep":"384:PJpPW2vYNJVF+4DDaHICH4JFKy5YtQvvAH5aE6/8zytG/woZABJM+jOJCSh8r9D:PJhW2vYNJVF+4DGHICH4JFKKYtQvvAHU","tlshash":"c042976430c2b772abaa14ed90f38145f3386845710b50b0e3ace8567c79577a2b7ebd","first_seen":"2025-12-03T00:15:01.547154Z","last_seen":"2026-04-07T01:28:25.797681Z","times_seen":3203,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/mobile.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/mobile.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-91b1\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAJrV2fYAv5H36mNwVtEoZ7dZuBIFDkeF%2Fq7wemJtB67V4wxyUacjPgHdc4ee0ptLDnbsZs9W59341nqb2l4XO0qEmnFr3HlvXTenDOvCkHCQWx%2Bza8tgcylGQi6WATCWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae76b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37260)","md5":"ddfdce19fe37919d27ccf706a3ac0ca6","sha1":"0dbd7897ad2bca796310454d13fe261a26a75896","sha256":"f3140aa1b6fbc2ad0275f58fee765e39c49033c3fd45e5c35926b9d2c85149ca","sha512":"5f127a927d07f65c8cc80270ede33b1adda22e67ecea972c86fcca1e0d85c9f6f6c9724f5330d43e02dd44350a93f5d8f853d6b43c7ec30fd7134c19da832668","ssdeep":"768:SnRYPletyhrGmd3p+nlxYsvrDFRsMaVPjJGUhCm4Uqw9iDCIaUrgpk4IX18H6y1b:netKrGoErDFRsMaVPV3B4Pw9iaygpEXY","tlshash":"c0f219c93289b5b2468600a220af605af73769d4b04ec854f17ce8ea3c71d95a1f7f5f","first_seen":"2025-12-03T05:38:05.167519Z","last_seen":"2026-04-07T01:28:25.946435Z","times_seen":1739,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/libs.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/libs.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-d9f\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vf7pszekBrpT7IoNyJ4stwtEsYDior3pmLhspEhRj21qEks0fvR%2BREVwwO4Lxn4aA8KFIuYYlG%2FyIA3LCfMhpbq87cjtf00Oov7HH48IZL5rcZ6%2BTcmwNDBfMkubfGMUPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e0bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3487,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3452)","md5":"9f088aeff281792829c18b3120584599","sha1":"036575b5632cdc5033bd44b6dd90ab59530375d6","sha256":"6be3c1147b0af8bae5ef536661d17aeb6a838bf63579e3fdf48a0de74675244f","sha512":"a4c11150df26f8ec8f8aaadc75b95aeb1f41e0feef48cdadd8d707ef3ad151e8b7035954389d41b47a610492669e39944237a5158b3d7fd4fd936fb5119dcbd9","ssdeep":"","tlshash":"337132ae3f682d7502df17f264cf1292633100bff8064410a875ed9819bced617a69a6","first_seen":"2024-07-29T04:18:40Z","last_seen":"2026-04-06T13:08:26.966786Z","times_seen":534,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/modal.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/modal.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-22b9\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfAY0wViRXT7tB3LXouslgk6Bf%2BzV3HMLcRrwwZSLaRbLeovqHGh5mpdAjBJOFqGzT3ECQYcv10zdcnY%2F2CWw15lJhmLxK6e5VmINtst4MCzRqp0j%2F26VAUbbdrh6xe%2FNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae6cb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7878)","md5":"01861b2caefd0edb4036d14d286af607","sha1":"28e4b6995d616dde1977f0c36cee39a2d4e069e0","sha256":"45c023adb807350f56eb4f43cb992c2e6386072f69fcba4f1a0dbda8c9869a6a","sha512":"9a55c1fc75f42d432cc08879264008fa5bcfdbb8bc54bc1396884adc83304a10ca4a94e55b71febf06b4f5a1c9ae44e7e98133b4ec136b3a070ac6cb19148648","ssdeep":"192:XWjwI+1LBdwJ94z0z+3w8YV8v9Pv4FEp6karpEvFAzAgETrh9AC9d:XFI+1Lzwv4QK3C8v1y7k6Eqzt4F93","tlshash":"610230dc79c5f0a14213b479083f240af37a5e66a10eb4a4d296e4e5beb0d4d9423fad","first_seen":"2025-04-17T11:27:49.60607Z","last_seen":"2026-04-07T01:28:25.924373Z","times_seen":11823,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/reset.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/reset.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-6366\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pSznFKCceRr9cxjo7Lyq4wVlIgXwnZCrU8jN6Earga1ljY3lfjo5dyRbMLJ7xxIJeIrGZZvPcBwK0SdpP4GpZpjJfyy3DUSwLuRtpyH0vC3VftS49rtI3ZmouosLfFYXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae73b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25446,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20851)","md5":"f9e9982e508ea29aa1b0e9bf518347f1","sha1":"8fcff4ec0a3dcbb68637f344f896fe5d5fc312ba","sha256":"9555e9b0ceaf232287e0947a78608b79be15a3fd2a6483f6d61cee3abb889c5b","sha512":"e307dde9d7f53ae874bdf3569bfd516764cdc17ef357b52abf4ffd4399c0a68233b0998253ab189e9368cc124fd4a6acdb2943a87a24dd2e532b3d54707076fb","ssdeep":"768:xQPu3W0Os8l5NRNvKAadpyPSJXbID+3qHmVG3mWQY/feeUJqvExNWko5SSBk+:xQPu3W0OV8/UPprQYaNC","tlshash":"19b2c4d934d1f0629bb325a7887f0006f2390988340dc490e75598d97dbb9aee637e6f","first_seen":"2025-12-03T00:15:01.464929Z","last_seen":"2026-04-07T01:28:25.89456Z","times_seen":3238,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/variables.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/variables.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-c4503\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRlE2oy55PBTDMmy3%2F5HQSSJGOeuEO7%2FSLgvX11uoivt0E7Qp%2FhIF5DQ89q0Hg%2BDLwzOyIT5kQnFWR1H8N1tKlQmTj0qeD0m34BlPyqHEJPZfLmEQB8VZW6ciYICpw%2F03A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae7ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804099,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60953)","md5":"324c0fd33d996c4629ab620bea502800","sha1":"2b08fca84938526d4014356dacace1352014adb5","sha256":"09e2d05a39231ec268fae429d20dfd3c5a68980d0854efed3c867f717fb0a71c","sha512":"44cb9a0375d173a761eeb187883781831461edc0b18320b281d874c547a86a5540979ca70ae5b498326afe70c8e2e0799a452b8467ec0b911034144c7b6af8ed","ssdeep":"12288:2lvmmXJR2qEf2kA+tem86s14OyYoEQncPQjZPVP4Yy4qdiM:M54Ck/tem86s14iQMQjZPVP4YyldiM","tlshash":"87054b9071917024e7a749d5417f440cb33f2a58b40ec194f27deccd29aa64ab2b7fae","first_seen":"2026-03-20T01:55:57.546001Z","last_seen":"2026-04-06T13:08:26.938735Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/animation.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:47.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/animation.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/css/routes.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab24-470\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2B9fe7wSOvK7%2BP80h%2BZVrRgyU1YaTHoPFKyOBspVoUBF8F%2Fjc079LQDLu765waJ7VBwsR5YVyjSYLcZecqPuBZoEDZmJ9DhZKsXEBwSQEBZ5GA4Ai%2FfvFBixI8%2ByJPJpcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb95da34b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"43e2bb67d2471f28766afb934d81dd24","sha1":"df7af1ce1d5efaefc81a60adade5ac3836adaa7d","sha256":"a26f4d73cdf8758321ac73fd8f09ef46b88e8827de697b8dde42b7c48a68e118","sha512":"86da74c95ef937a6d6e5e87bcced3aab0b4bda91879960dd08256e7a42c668b427034d86af91721ed5996697cb5fce890e08fcdac2933ae5032dd1190d4f1ca5","ssdeep":"","tlshash":"aa2135a2001f9660de151eaa33cf7f2cbecd25481592c1ed87780cd89cea42b4349f9e","first_seen":"2026-03-20T01:55:57.546914Z","last_seen":"2026-04-06T13:08:26.936169Z","times_seen":5,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/fonts/font-6.ttf","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:48.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /fonts/font-6.ttf HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/css/error.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16100\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:08 GMT\r\netag: \"69ceab24-3ee4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEemFciQGMbzhwbGo%2BShcJP1T3WC2YT8dhHqzc1KJponBQnASbNUXKaCDlT2NH88uEgKP1%2FACt%2B77rTMgxIWtmjWe5ufa2b9DOaFdogm3sRcGaFK5dOoI%2BSwLHEv5KM7EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb9a0ed4b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16100,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 12 tables, 1st \"GPOS\", 8 names, Microsoft, language 0x409","md5":"f346aa988283a440b4dee5dabb32a600","sha1":"2ec12a4b30827eed659d1e5a022b82a891d86206","sha256":"9d62ef284ac53a609354be09b50d566bb18c4bb1cb8d63db8ed05d7ef8db1efe","sha512":"dcd4732949989f0f11ee80f5c7247341b656ed2b685d66aa9514228d71ec2f62835d630425e70b635ddd91258871f95936ed8e46858d89f99a38fb02dce6cd95","ssdeep":"384:C78IoEEcccccyE3yyWq81dzESIL6szUZXV1AWMvyjltaOdfjfrwYM:vIoEhyE3yyJ8vELmrhtBs","tlshash":"fc722a06d367cb4ed60b1a79b5b0a3c396ece82db626031fa2943f27f88e5508c49715","first_seen":"2023-04-19T19:54:55Z","last_seen":"2026-04-07T01:44:11.74718Z","times_seen":530,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":528,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-10.jpg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-10.jpg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab28-1cee9\"\r\nexpires: Wed, 06 May 2026 12:50:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrgxA%2BVX%2BV7aCJMPlthFdnhhOxdQC%2FXaCDV2s2MaK%2FhrurZJVS6efPFTPezecasSDU99hXeA%2Ff78Gs55UQ0p7awuEHi9tTp6YRqobsIERLGo9u2tk2LhiiMK7zytK9BZ6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb926e04b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 362x400, components 3","md5":"38fccca2bc8aea316163f90477cfa651","sha1":"a2a0af2ad3e23a0dc1c51dd3f88d9903fd8594aa","sha256":"9afb8da951b2339f92d31f9960a33e9b904e4e0bea2f6613d9b33b40f40d16ea","sha512":"6520d18f937c74c94c761f52b5f6defaeee09c3913a49588f883ce9cbde108613d4417b76ed2d377ff72c34550eba65043211e0a6ffc8625339e1420361f6fb2","ssdeep":"3072:k+GVfBC8m6jb9IzLzk+nWGEO+YuF4VCSog1h9:k+cTnjbuTyGSSVbh9","tlshash":"b6c3125b4f7dbf8bb06a18459457e67b7ecb0337ae1d2484306bc191c80f1a43d891ea","first_seen":"2026-01-13T09:46:19.516102Z","last_seen":"2026-04-06T13:08:26.934238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/card.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/card.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7B60%2B0N3xgSJnpqBXOU4W2cV2D9rDa2%2BZ%2B8JEn0spjvqh7nLN9AOnBcWdCgzUbn%2Bh5V01oJ6l2bXhkoHkqTqObA%2FJqYkHypfE2SlypsG%2BgyioWVqSvBZ1y9%2F%2BIEhOBbnHg%3D%3D\"}]}\r\netag: W/\"69ceab44-384\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb928e37b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (821)","md5":"f6e84b49b20f3df8d67416886a41f305","sha1":"71048379dd0f9051a450352788d857bebd81b5e4","sha256":"fb78ff9eb3fd2ac10b035d0bd433777ece12657eac1d45a641c8d033b81ae1a5","sha512":"2dd2718e18826cee91f154d8bac14c35078a735a8dbbaa2a7f89727f4d7ddcdf5b7306afb7144fc73c5adccbf2f6789752679fd7ec16cd4b30ac68d74efe1650","ssdeep":"","tlshash":"c71100d1d48624e32bb3d853e12e94c6763a2208107eeba1b793f5e4106ead58163a72","first_seen":"2025-04-17T11:27:49.599947Z","last_seen":"2026-04-07T01:28:25.889549Z","times_seen":12361,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/nav.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/nav.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP9oZmst04xGV3qATh30XP8YjK1V3pr4qFP4auWJZFsnDzhAgQkpvGzR227zFZt%2Fuja4mMiwVe%2F1CY%2F3CkzxIPiX%2Fp5yD%2BvXN%2FqgQRBvkpQ4H7aPIgbzFspFoE1JES0TXw%3D%3D\"}]}\r\netag: W/\"69ceab44-3e8\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb928e42b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (965)","md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-04-07T01:37:08.602633Z","times_seen":22414,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/campaign.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/campaign.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab42-40aa\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9la9V4EYp7VFoFoFG9pNkOM25xMHGrow3D1QimcO31SaeYstJIgQ0%2FZ0xi%2BIitQKXu7QFFluNy6HHelPHXohVLPP6WRXIITMayBCGrCWUAuBQC%2FkOhsVO%2BdWaH%2BtCb8Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920d8db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16554,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16519)","md5":"124541f5f0afc6f8ba179f1b4aee3abc","sha1":"5d0269985cb3cae51a4ae2c9c576b752346bb0ec","sha256":"924bcbf97ac13f3f3af6e154f6f36f0ac6c219ef27837c7ef498fb4aed16ce1d","sha512":"f8cdb297f2e75ee2e6b16e98fc0e695f0e4a8802850ab2e66d129b3f754174e1807c95fd8974c537a768650379c94fc63dcb2fc5d1d399ac25f4b0b611da5c61","ssdeep":"192:onkgYZg/fMVEpmENZe9R90KRP6dE/tP7+VL7WO0nJloRVq:0uZg8VymxRh6u/tD+G","tlshash":"8172eea4e64904d677b1c853bfa6b27a5286bd2cb8418ddbf40b410c1af363605ddfb8","first_seen":"2026-03-20T01:55:57.501792Z","last_seen":"2026-04-06T13:08:26.951538Z","times_seen":5,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:46 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 06 Apr 2026 13:38:46 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSlFraZB5CotrCC99mNne7QSXrfeDcQgquX5XzwCbSDpQLUlu2aupBfZdlh8b%2BVV3Nvi14Evxde0gMbqEX0kV8SyDinNeD%2BvegFzC5Q4XOk18Tl8XgF7eSU9lIvj2P8vyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e80eb926e05b512-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-07T01:12:46.567448Z","times_seen":294459,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/utils.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-d36\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REUuhxghgdwPpdp%2BMApngfGkX2QMiQ4bMvhKsiNWaeKYgziz%2BUfGnGk1M%2BeKwy1HOsmPCiPDA3Jhp31Lc67Z6wklSAbkwqibKgG1yyIN6IccYmueIH%2BriZ1jXhoUQLFIeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb929e59b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3347)","md5":"7a255c08e0054eae664a789ebca4ea6b","sha1":"0029c9ba8d0cbe92ffd1261c28eea07ef421a005","sha256":"ea406bab6c86f8e0c6e65b3c0daa5e1c7d7bb3cc040f79264b10731d8a27998d","sha512":"5cb0f07da6f77dda5b6dfb7a89dfe3fea2a167532ed53cb211ef9545d220eb6902a19a6199c3895a88e8a70185c38bd12c4d899d20a2498d21029675ee86250e","ssdeep":"","tlshash":"996184da76417470527296a7663f4383b3394576389f50a0e635dbe1393898b03b2e8a","first_seen":"2025-12-03T00:15:01.462621Z","last_seen":"2026-04-07T01:28:25.906182Z","times_seen":3202,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/config.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-8f1a\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIpPZjbMUHKUiAsdAnFw4FxVm9otXdZ3rQcfDuzOKy1WbSImC4RzaDBAuGDE2hPU6FskHR7lec6YZq%2FY9CrkXQwlERc2mntMUwd3ccuzTFEp0oRrLyqDBtzXPGpPjZj%2FXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb929e5bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31456)","md5":"a884a15710d698a405a645e228b4265e","sha1":"280e8af5cc207ea3b7fa4086c763cd18175aeee8","sha256":"53db5edb619c2e5e2ed4aac3a4df97080acf1f545eb8aea47909178217500520","sha512":"cc0cdbe1f1fd290a15009e5df4b753ff1beea5dc900180fec7edd6c537533da89a31c0cc76e02463744c9c9f94fa7ad0c0a1216c42d00488ff827da6a2aeb448","ssdeep":"768:jKHCIKIdJcxmufNWCMucEQ7MSpHgI0ddQ04PXZVEgnNmwk9iudbv0HrpzEPBQ+DT:jcHTc5NBNi0ddSHCT","tlshash":"37f2b7d43282b070d7e751a5507f554ab33a1aa5744e8040f23ddce93d7a98ad2b3f2e","first_seen":"2025-12-03T00:15:01.638097Z","last_seen":"2026-04-07T01:28:25.872229Z","times_seen":3204,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/styles.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/styles.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-10ee\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8HabAV1BbZbS12DK02sOD1xmZq0vQeCkZuZwcCnWuXmony0q0Rs9LKZCE7r12KTQKls8h%2Bt5kXk6JHwAIZBbZvYpVZZa0JqwKJ856lUsEvDRzJ5X9GpISaLl1CBqNYKweg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92be7cb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4334,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4299)","md5":"523ec4885dbe79aaca0b0e9496b9425c","sha1":"c7dc88ebd0f19a87c7b970ab244f20af3805af59","sha256":"1402be9a94bfa394dbe60ec2e4a061be867f013ff201d37e07561890b5409dd3","sha512":"6bf2f944afffe56d598f76c37173ac6cf08802da97d682c3e67ec9579d8dc3f182512ca453a58689ab76dc3786843aac00d971a5580c428d49fff973e8d7dab9","ssdeep":"96:ILwsvCFDXdkPMEGbPJPqfA/O2RRR/OqsBGuN0DRcag/tmI9/tmIHtPA:qwsvGzdkPMEGRqo/91/OqeZT/tmI9/tc","tlshash":"0991936135c8788156fa44a8587f28c271ee5b95312cc4a0bb3d35fa7da788780277c2","first_seen":"2025-12-03T06:47:45.118055Z","last_seen":"2026-04-07T01:28:25.898951Z","times_seen":854,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/favicon.svg?v=1aa15jf5htnmnhrm9y2","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:48.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /favicon.svg?v=1aa15jf5htnmnhrm9y2 HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FkcuG6EzTcXK526%2BGK8tlwRY9K3YHqHQBTFMjr%2FylfdS%2BkQosA4i7oJHSZ%2FasFK%2FE7BonrOZaernr39NVOe34xxJZBMcQHmszu5fUtmtl5lfBGrMlMClOrMPQU8FC2IAw%3D%3D\"}]}\r\netag: W/\"69ceab44-dd\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb9e9c55b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed490ac1c8e5269b48421b516eb8a065","sha1":"39c6ad537e8703ff90b20fd2c9cfb53d5a240e4e","sha256":"dc5226b9a868f4f43824b7449a8895e9af100779843a9bb4349fcb683847e660","sha512":"8b507934aed3b9e583b8c38300aa09ec5c48cac95683814c00715256c4c24cb7be718af4b8ca8144a4e3f91a142a12bc74a179d93f476a8266b9c4224e8b0a60","ssdeep":"","tlshash":"1ad0a7d5619cd40ae905522a0ab9388a250e31c55fd5095d79b0252c3a0a2f77c11628","first_seen":"2026-04-06T12:51:18.5506Z","last_seen":"2026-04-06T13:08:26.931283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/apple-touch-icon.png?v=1aa15jf5htnmnhrm9y2","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:48.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /apple-touch-icon.png?v=1aa15jf5htnmnhrm9y2 HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:49 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-c27\"\r\nexpires: Wed, 06 May 2026 12:50:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpY7j70LrTDY%2Bp9XdJRZRjyEhuMeHgo3rSPmCxLXH%2FjLI5sNASkvpTREXgeQggfmcTJ5qXqOilqUu51c79QoEYLfza0vNwVaox6B6bJox7YJBxhrA4vXM6WlV2OVmQqtRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb9e9c53b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"dded8f93c293ed39ff97f37164118d70","sha1":"d4afaa37afa196252763af8728003409b00a7def","sha256":"c3b79cceeba2c4c3fa459d4a726a980b889ad5453120b9124e07223ee88a9159","sha512":"2267a9094a518fe4d3dabb9cc4663e78d8706d8b0aabb28c5cd1222f87c8fa41b72c6be70c660f2293d6071fac99587dd6621127dabe8018457199b0cfd5e316","ssdeep":"","tlshash":"59514c4f523d9c860c0786ac65eb31c10b8551bedfefd090a8a2fb82c933305a25b0a6","first_seen":"2026-04-06T12:51:18.552548Z","last_seen":"2026-04-06T13:08:26.958691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/manifest.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/manifest.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab42-13da\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9H1wW839ORA9rDGyaNoScHJinKmdTGo%2FOwfUX%2Bpfm9XckmTB2fVbT1ebyBhUCqd4QQKOk8EiFYeOk5M58yQhTINLOGhhBoF8v%2B4cdv3vm4JLfONxN3IrYRDxnzMeHcwkLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb920d9ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5081)","md5":"460e9792142a5337944e24bbcbcff94c","sha1":"bf2b2881f65a44eb50b0a9434cf0619bfa9e3f34","sha256":"04f879f2eae2978e230c58a59a35c815ccd341afe386f7a332776b096f09d09f","sha512":"10708183212784420553969b6ae01a646f491f4188d85865912f09544b1d3190b308aabc3bfa18314fdd09b362e56b3ea8d1a29ac8d345afcec5402e4026f863","ssdeep":"48:MRtBEWkOuEUPZWiexiV1h9uO7TOSd+ev3eu5vwN5e+ScSGVd:kAWiexiV17uO7TO4+ev3ekKDScSGVd","tlshash":"75a1e724a6620bec41dd521926bd5a0753d5c28acacbd9ff83529ff401cb20bf9634e7","first_seen":"2026-03-20T01:55:57.482283Z","last_seen":"2026-04-06T13:08:26.937274Z","times_seen":5,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/user.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/user.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab2c-ab6d\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0%2F%2BKtKes8oynPpkMuTSuCLbB%2FzNyBSXuwmiX0RRo%2F8SZM2dL%2Bzl0XKKLuZR0357mnH3keB9Kl358T9ECApCMt7uf9FjnkP2QxgmykzDutXSBbvS7ODSdd5CuQv4Bw7QFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e26b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32026)","md5":"f156add3be76dd6ee084dc63f8cfe3da","sha1":"fb1c1657fbefce2362f82265ae7a5d0da2e53d55","sha256":"ddfbc20b572338e84a5a632d52bb0d9224a8bb28d4a2a49e07e61797a92ffdf2","sha512":"4a6b842746aacbf08632be7fd242ccc47ac42cfb36b1620a367fae0514c94238833badfdd0aabef1b30a41baeffce547efa816c2866152b066b3bdc787e6c1a9","ssdeep":"768:KYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:7DFBQmTNfMR4X6DJ15vj","tlshash":"4013a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c3eb606e84886d77fa","first_seen":"2023-03-09T09:22:16Z","last_seen":"2026-04-07T01:16:45.613727Z","times_seen":2013,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/lazy.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/lazy.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-8a4\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlIdKGKw3O5yxw1AWvqJjpib9ogRLGVtCC7cksIO8rUJoWLWbP38%2FNeUB9CQsITugtEe%2Bc6VH90NH%2FasuIthLSGvPq%2BJ6mw8Eb4ySRslTQ19D94BKZ3NAN09p4qFXUbKMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb928e3db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2176)","md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-04-07T01:45:44.645925Z","times_seen":20948,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/widget.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/widget.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-14c2\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4Q%2F64szPedMK%2Fb69GFKg5i9ztH093JZ74JLfB9nRLgXOutEp%2FuKPsk9uQlM%2Br2dUpXn0RI3oXnr1gz6Nw1cyhY%2F141DZIwOif7bxVu6k3b6h6qbtr256Uwph%2BJ27GHxdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb927e31b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-07T01:17:34.659502Z","times_seen":109947,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/login.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/login.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncZS8%2Ffdb9ZMY7Iw54wKTO%2F7B1PWy17LquMWjwsJeZfAvSO8WPSDWVvbM0WycLJPc1UZrV2BFX9HXSY4013Sozh2e2H33AciF1h8w6AlIglMPtVmSC4kGcO%2FdxfiZOA54g%3D%3D\"}]}\r\netag: W/\"69ceab44-3fa\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb929e4fb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (983)","md5":"c505252b24643d1cd4c12c05bb1c2e29","sha1":"015a8c0f682c6c074feb10774facdcb67362e911","sha256":"8027a5c64c0fe5132f2119cd1bfb824f10b51bde7a942233e80c3c3db6f4aac6","sha512":"853c0850caf19e5b5c80d0d5a47193ed2f89f52bbe6c1421a7950ed9fe3a1cc8bdba644a63ab9af42784d8392c4b08181fae962334a06541ea284204f180c29f","ssdeep":"","tlshash":"b611a2a031d275e1c1f858dd4416e042f1244a6736bdb5c1f30be8a17c11d9764f5c7e","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-04-07T01:28:25.815685Z","times_seen":14021,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/module.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/module.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTjQfQxwwHJfLgdhI2%2FmWcHM%2Bxb%2Fo5F2mRwO6Ko%2BZXZqEB7Ewsze2pU%2Fkan8y1Bw1znyMPdvmIC92XEc2NWmN7AiU7Z3q9FVl%2FTa082C85SpfZ4JUcmzlxvcvmfKGXfwSw%3D%3D\"}]}\r\netag: W/\"69ceab44-318\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb92ae67b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (757)","md5":"017f192142e96889820666aaf442cd2d","sha1":"72ff953f9a48e5998c071604bd4c17230a1bf301","sha256":"9d80aa6bdf0cbf1d698df649307aee7f5873022c9bd19806bfaf24304fdc1cf2","sha512":"06305f650f06f115b491272500b9e99cbd56c3f45301ab6c14a6b48c37b7cdb065339df4055e8564f169e98a742720731219a06a903a1da297f40631da8432ad","ssdeep":"","tlshash":"9801cea07c9068f0296f408658399585f6642225327670f0f78988b9b571d56136ee37","first_seen":"2025-12-03T01:51:42.354845Z","last_seen":"2026-04-07T01:28:25.785702Z","times_seen":2862,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/css/gallery.css","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /css/gallery.css HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9HPuP%2BZx%2FZ82vWRXCZWauadlZnciX6qEWETDhiSkM7y0GrxfKzTLZPmRqSCkVCHPGlx3NAhsjxBGUw9sXD9ADjbeNqPtcRYE1shl5WxZCDTfhmlVSbWSipNsUD%2B%2BEsU8w%3D%3D\"}]}\r\netag: W/\"69ceab44-a3\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb920da6b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d804a0d62c36583d0c8be13240c93d2c","sha1":"96959188fd0f5d82200dcf03cbc13529bd71a5ff","sha256":"dac15cc52bf9db2803bb5b4d5de7c8ed59f556aa02ad8e0bed6c54a378ccf583","sha512":"44338ca4a044e3835202aed2460f8e6f21678e71dd3b8954bc548b8403fc7d0acddd656a7c62fe09b3967c3fca0d6dda5536484982aee59093ee5f578d141832","ssdeep":"","tlshash":"9ec08c5000051212da210c6a338f6f195d8c18053106d96f077d08a87dea42a1341f0e","first_seen":"2026-04-05T12:04:47.048101Z","last_seen":"2026-04-06T13:08:26.959753Z","times_seen":3,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/img/img-6.jpeg","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /img/img-6.jpeg HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab28-32af5\"\r\nexpires: Wed, 06 May 2026 12:50:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9jAV2uPFJ1yUCvQ%2BBU5qjDflqJ6StfzPAddQhiRqdVAcIAWNWwZPgD9ns5vSRXzzYlW5FoJCcuLMedlnpJFZ8duY7nfHaRCzSJj9IEcXmQ2NhY6dMUci4aHSvhnoRwo3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb925df5b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x854, components 3","md5":"5c23d2517ed07dc03a5bcb6ad624283e","sha1":"073f4a9d5e3d3f0519d8d556da4e31efaa51adf6","sha256":"8a95cb3acd8e41b8f89375f821e0fb54c49bd1c2e84d4be785feeb1e0c61bfc8","sha512":"fcdcfbc0065fb227bd277ebd4dc17a65c71fa90db95bf06121b1847190eb5bda0ce0f9f12c3d12bf9ca5e3ffec8e11ad41163dad8189a409d7a11eb791b9dfdd","ssdeep":"3072:hdmFAQ54w9snK0glZqvksRiFY1EXQLQ8tU42vqevNJBKGzSBSNebO+CcICdhHUd4:fZ8sK0yj68YbztNqvtXSBSN0OBcC32","tlshash":"96141224faa17627e2306371fd864773eb339491431a72bbb411b28ea7f175c568b072","first_seen":"2026-04-06T12:51:18.567262Z","last_seen":"2026-04-06T13:08:26.944301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/ui.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/ui.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ceab44-bf553\"\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1vNeYIoyYtHpz0XFb%2FZlWRGEVoBlks4WgVZwp68IgaJVwPtw4kEveYCzSZshPDzVF8iRSOO6R7pYzSGNuBNUvL3cxOxOr4%2FxOn4yjK%2FnrULYVES4X6QkNuJV3VtFSkAig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e80eb92ae60b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":783699,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b0159c1f26fb0a8ebc5008949d423da4","sha1":"0a38483f79e33b7909126e30b9a0c0c1f139043f","sha256":"ccba79f0dd8ab2c52b3cda508a3e39deb976a70bee76a1882e9235a830e5552e","sha512":"61b5bbaef715ca6b0513125cb3c468e21174c0e8c1ea7762bd0b255c41cf0526e0c6cf39b2ba6128c595a7c35d7cfbc81df25ba6036f1e7795130453e4ddcba3","ssdeep":"3072:AGZDlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/DCD/DD/DCDF:dZ3Hg2k","tlshash":"40f4ff285a6bf744e808c0dbfa373d84c59dd18aa44765d20f755bb34ba2793ea9cc03","first_seen":"2025-12-03T01:51:42.311192Z","last_seen":"2026-04-07T01:28:36.504762Z","times_seen":2248,"resource_available":true,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wealthvault.cc/js/actions.js","fqdn":"wealthvault.cc","domain":"wealthvault.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wealthvault.cc/","date":"2026-04-06T12:50:46.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wealthvault.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:44:36 GMT","end":"Thu, 02 Jul 2026 13:44:35 GMT"},"fingerprint":{"sha1":"46:F9:03:6F:1A:EA:D1:A9:5D:3C:6F:93:88:B0:76:B9:50:34:69:1F","sha256":"86:70:E4:C9:68:36:EE:EB:D5:FC:69:92:F3:CC:E6:3A:73:F0:A0:9F:D2:23:B3:DF:03:DE:28:5E:9F:E0:E4:02"}}},"request":{"raw":"GET /js/actions.js HTTP/1.1\r\nHost: wealthvault.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wealthvault.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 12:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 17:45:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 07 Apr 2026 00:50:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pykxLv3aqHb1Rl9hSgy5sf4aC3PGGxjIF6ouyVGa9609vlis%2FyL9oXOF9tTbWJOtjw3GNRrWus0FLTs%2B064gBGiN8G0v89utH6VmHQkLoCPgnelmWBG9vgEIyHzqj5DVnQ%3D%3D\"}]}\r\netag: W/\"69ceab44-12f\"\r\ncontent-encoding: br\r\ncf-ray: 9e80eb92ae77b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c5097af142d9586d85d95b2804403b53","sha1":"7f5fc278d8d81ab9b80647f54a775fd685992d57","sha256":"c511927f2a10ede9d54252d0ce689e308eb042019a6fbaccf022a3db61d49726","sha512":"8d86b9abd02997e503f5088d75c792069995e624935b360f719cee0ca3173e9979ed22a70b9e85d70338d6046518d2271151bd1d93f6dc13e5aca887e6c88ef9","ssdeep":"","tlshash":"a2e07d512490ec9472bc00d5481614c2f111543c033274f10bc559b0a571c77067d872","first_seen":"2025-12-03T01:51:42.367198Z","last_seen":"2026-04-07T01:28:25.864226Z","times_seen":2285,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"wealthvault.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}