{"report_id":"c1dc64af-5601-434a-aa03-8416e00b9520","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-02-21T21:46:49Z","url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Wonexbit","dom":{"size":477916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5511)","md5":"5b09ed11183b33222b7cc19da5e4f062","sha1":"b81132f9429e81d44f1dda78f99ba1ea9b393d31","sha256":"ee37d89c5cc7bcc5a0ba47ed4e1da67308a490dcb170d2cb399ff566bc0fdf67","sha512":"27ed24bacd85c9f9307efbfd41c11112cb58d0a48d37069a5596b96f0c25c481914fcc6e74ad348b74e837638c37e0d02fa9ab193d260fa2b48414132a5995e2","ssdeep":"12288:FwJvUCcbIz24w24LijHOWJAuyX8sBBhrhFch0cZrL:w","tlshash":"a0a46b7063f11259b003c3a88bf95a263667e853e902c69877ec1dd0dfc799e9d9324b","dom_hash":"domhashb2d0bedc2dad13dc37236ce21fa2b885","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:46:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"wonexbit.com","ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-19","domain_rank":0,"first_seen":"2026-02-21T20:31:56.261426Z","last_seen":"2026-02-21T20:31:56.261426Z","alert_count":64,"request_count":63,"received_data":6222370,"sent_data":32065,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-02-16T17:11:07.338723Z","alert_count":0,"request_count":9,"received_data":40794,"sent_data":4236,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":3,"received_data":383881,"sent_data":1301,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-15T22:47:07.321489Z","alert_count":0,"request_count":1,"received_data":88168,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-15T22:26:45.957139Z","alert_count":0,"request_count":2,"received_data":654185,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":3,"received_data":131913,"sent_data":1641,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/cryptocurrencies.min.js","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","size":749,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-08T11:36:22.698994Z","times_seen":22074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/toastr.js","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-07T23:46:49.515699Z","times_seen":915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-06-08T08:07:10.865533Z","times_seen":4835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-06-08T08:28:37.866861Z","times_seen":2036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T11:38:59.930079Z","times_seen":166455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/main.js?v=5","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","size":21249,"data":"","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-06-05T15:12:51.640325Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1b4f8e8b753a907a11299f8cc0e4145","sha1":"b0f712cd9817c6edd730abdedd6e4451639d186e","sha256":"8769f2980fcad87c443a484870e3bbc4fbe40546be12c57cfabfbd86e883f086","sha512":"1ab4e7f428726f910b5f20eb6b7a96ecdef7ad1f82a742baf850fabdbbb95d1c789ad033341c2fae206f63808bf7c8f8e414cb6b59cdde18725fc61db63086ab","ssdeep":"","tlshash":"1411b4044070016209b2662a1f2ea310656252474debbc34389c8a849f6911f86b87f5","size":976,"data":"","first_seen":"2025-06-30T14:26:49.418257Z","last_seen":"2026-05-11T21:14:43.259228Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-06-05T15:12:51.796161Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-06-05T15:12:51.797265Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/noti.js?v=3","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","size":12111,"data":"","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-06-05T15:12:51.667995Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e164d5ae02a2209d639ffc7cbc85c900","sha1":"459267c1b7e040ce10af3f981587596525b5c7e0","sha256":"db64c8fe03f2692f49db33ec9f12454e49c59e5dcb6ecc657ef764eccc89ab00","sha512":"d9da3a981e4acc051c4a579394163e1bfb8468688461bbaee5384a664a356360e053ae59918ac8e7f8d4be0ce4c7d8a3239f2c199af2ab8847d66071ba037516","ssdeep":"","tlshash":"5421761d92f516344573b16b13cf5c1d293110bbf089ca3c3e6debc05fa10a499a6ac9","size":1319,"data":"","first_seen":"2025-06-19T20:02:29.567184Z","last_seen":"2026-05-25T10:16:26.62692Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72ee8adb330d5ca4c5d68c08d2c82d4d","sha1":"51852bc01b5edbbf37ea930915b13bf25816caa5","sha256":"794eba715fe6fe2f8036b6b751f3749fe868102e0d1d1ba0ae7bf85de90f2240","sha512":"3e09f830b768b8a9814f106064fa83947183b3e0c3b6786a5a1fa46a28bb2f284c8233f603c50080c9a3571a1e3644817dd60c8df42b78e9f811f0ab4cf95284","ssdeep":"","tlshash":"01f0264a23b54270a46fa91f819b11083b518047681af858370c42d06f5efaea2b37e6","size":494,"data":"","first_seen":"2024-12-06T22:27:57.13338Z","last_seen":"2026-06-05T15:12:51.8497Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1870326e7e2581c17a2d8483275e697c","sha1":"12e42d5cffaa0dfae1c50982657599d032c1f5b6","sha256":"f178f3a61d6e863ab5041c32429147a5685afd75f730d9338aaa3ded19c3be96","sha512":"9b910ebee21f3ae000b4ed67e4c36c6a91827f9b6609a2f7e859b56e076a83e751f000ab179583038f5297d121f7d06b4c75448b66d1a69e339b6397a398d025","ssdeep":"96:By5RgaBWaBMLPND2n/a7mLp/gDJPYpiS4eJJWOhev0nvDJeYQeeJJWOhev0K:SnfyD2nQmVgsYOkv0BsYOkv0K","tlshash":"23d1436c99ba192c607770eb1a9f47099191e10b3e86dee97e0c43505f7a07cd4fb389","size":6663,"data":"","first_seen":"2024-12-06T22:27:57.134398Z","last_seen":"2026-05-15T00:39:55.753747Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/3/cd23cd05deb514b1.p.ttf","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/3/cd23cd05deb514b1.p.ttf HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt4i88UfLhqANdvK5iO1Ez3KxNxZMCoKvrm59M1GXGllHCU2A3HT4c4RDh0%2BYF6C69JciWP7n1aQApQlI%2Bc4B87KYFeJCYs%2FyZdnGw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d196fc41bd1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":73885,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"4aa5f42c94a7e025133566fcef661413","sha1":"6b8afd79dd1a8103950761a3ea7291dcfdbf3a54","sha256":"89f49d0253481d894b0bce9592eff6fb0fc79a58bb478d3dbbea18da1cd7e526","sha512":"a7a2723b05e005c9c8600b94e5c63c3950f7fdd33490a43541cfd392c282a3f492ee875a2039ddce9bc2534a3a5166b6dc2c20d6e87eec3f750326decfe4b835","ssdeep":"768:fbqVMGhM2EGWUWvbnK44447zHItQmyu1G+OAr:uVnENdnf4447zHItQmDG+O6","tlshash":"1273826065c0585281378398a6b297a9fa6580579b8ec68472fc3fc75ff2e81cec351f","first_seen":"2026-02-21T20:32:03.329038Z","last_seen":"2026-02-21T21:46:53.599576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":112,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1159\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 80ac9b2e-a42f-486b-8697-8cc698cf644c\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: nw7phEA3149JcCm0grEdJoKQdrRCQf9gka8hIIJPOCoou9WW_fqUcQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4027,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"42f9920a33a124e82b876daebc074647","sha1":"a30ea38c876f1e4d3bc4a62ee87555016067c064","sha256":"cbe666dcf601289bbb2597cd99bad84c63b47654fc469c7a68b8f87c1523cf4a","sha512":"006f4e320bfb2e241a28f76c44f9687f0a62b8fdcc06f8940316df5f10e29d7226e5a5fb28bb56d5fc82a300252af105486571ac42d42da157c70d26a1412fae","ssdeep":"","tlshash":"2681fa800ba085b4fab64c1d6391f9951766b4dfeeca0fc1c9e1197b08d4e719f08f55","first_seen":"2026-02-21T21:46:53.606119Z","last_seen":"2026-02-21T21:46:53.606119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/css/root.css?v=4","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/css/root.css?v=4 HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTrwZUjJ8X4dw6ZepFMNnkaB6Au4Eo1KIHCPDOpYGMjPgoSCLHArvE9JQcUJOchdsPm9LoiZvZI9v6A84kGZNOcXH%2Fn4Dp4VxKVfyQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe8ae0a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468617,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"aae60af88f09730529aa34099c9a954e","sha1":"a8ceeb812ea7e5f794f095cc0fa7cb9a89651747","sha256":"e30ca4f03117d18001bd40b500fb64a6a5e7958980a15b918b62a441ca99d872","sha512":"77e70b87fc611d4979cbfe6ea0ff5880a781c1a5be989eb8a87e419f12aa1e0d7ee3385fe449855ff58a66bf214346c0b8ecdc336c4ebc3acea7eab3037acdea","ssdeep":"12288:9MlXqMl7MlXqMlXOMlX6MlaMl9lQFjM9MleMl7MlUMlkOMlJMlMMleMlX7MlXfM/:P","tlshash":"8f2583b7e546140341739a7b9bd3a378db7c40278b0160a639ee75448ff42958ba3e8f","first_seen":"2025-07-27T02:35:37.343068Z","last_seen":"2026-06-05T15:12:51.64165Z","times_seen":108,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/main.js?v=5","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/js/main.js?v=5 HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5PZylJHkdZPou2JXw%2BqCZAMpW41nQWyrjLbWC28%2FN5ho0rpf2OKafrA78%2BUK%2BMLKX7ozLSvl0P9UscLmENNMqca9UdDi6KYgA45XQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb12a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21249,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-06-05T15:12:51.640325Z","times_seen":280,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-excellent-liquidity.7596c94a.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-excellent-liquidity.7596c94a.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\ncontent-length: 7871\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpzCUG8xWbktRgHtQyNR1APjsN62TwJ2skWV6ixRJ%2FcKtiXprE4nBG2yXNrYffKmroUDGPP5Fi2qnXangIRLOwqvUASquVV2%2FVGJfw%3D%3D\"}]}\r\ncf-ray: 9d196fc58c1fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7871,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 163 x 160, 8-bit/color RGBA, non-interlaced","md5":"2519b719c5a0c85cb85c9e68d48423ac","sha1":"ee7d4d2ecb1ac1496efc56c1b56e3e3b5586f19f","sha256":"8866bd1213e12f1d76e0d9e19550bf998e60751d6e31c5b8dccec7190e308d8c","sha512":"4f6c522466503fd299c11f0167f8a91f48186cf5559a18986668bd82cdcd0098ebcb39fa1c6af6409b1a2de9510eaa2aa731e467896db668fad28c4d08526fe0","ssdeep":"192:ZQikpUZ/YhXktxkasVqwIOCWP0oJ9zWk+zy7Ox0E/GELIWbK:ZQikpUZ/YxoO/P0e9J+8Ox3Lk","tlshash":"cdf1aec97800d82293584f5d2e4337c09f377ecfea4646baa0f2f7c9586190bd9815c6","first_seen":"2025-06-30T14:26:49.391699Z","last_seen":"2026-05-11T21:14:43.251839Z","times_seen":79,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/6.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/6.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 70442\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwTn968Kxnr%2FoVxa5QlShax9g2GZikvpTHkS%2BS1Kd%2BPQpB0q9omxCYEkH0e8usJauKW6UQyLVhLP5%2FdJ9ocXbj61hTnzD4cJIHybew%3D%3D\"}]}\r\ncf-ray: 9d196fbe9af0a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70442,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"cfe680c2f83e044649ecdea47c402578","sha1":"006d21087250a5f1599f0e8a1daa3a1215cd99f1","sha256":"13b56d437f4033933469e293cf44a8df7d5402472ad6dcae4e1bce890b347cab","sha512":"de35dc3524c9c851558baa2278ea0904e46ff0837a942f2c7928958d3d42ba9a4bfaa64f279d8ae69b97990d441dd6fc2a5563efcc2d1b17f89c53a4de84be98","ssdeep":"1536:acXLGP4zeS5JQBa7fStU4PATBPzKHQNywIVoePdYlQ3Z:t7qSbQBaQDARU9wfePP","tlshash":"d96339175d0a9b97506c83d9be530ead2f0a6b1c98c63aef00230e8b3f657760c5e45e","first_seen":"2025-06-30T14:26:49.387451Z","last_seen":"2026-05-11T21:14:43.181504Z","times_seen":82,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/BNB.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 2560\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H22Quy57jZL%2BKockNrYlWlN%2BQOScp4N9anCrpkZU%2FlW%2FOpxsijR7JExgxNbYda%2FRJp4CGUPVLlmRmS5KZd1hZPJvTPFFK4WUSCa57A%3D%3D\"}]}\r\ncf-ray: 9d196fbeaafca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-08T08:00:48.028911Z","times_seen":1506,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-security.60d67960.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-security.60d67960.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\ncontent-length: 5669\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOlSmftXPO8vSPxI9xUVEVjTgwn2gogIn4EByqlg7OAxKgd3H2e8rzBwd%2FvujiILTQNhzsDY7qFPZzVw9TGXHs5nobZqj6KuZjaLYw%3D%3D\"}]}\r\ncf-ray: 9d196fc58c1ea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"e4eaa11f2d34198c30119b0f52f1ad1f","sha1":"63187856313620dff0153cf3587963b3f3bc11bc","sha256":"47980e345af09739fd399c79e060971df53b51b6bcf608c9b54f3082e1975c04","sha512":"0b4104bfffdc6ca52b8a113eecd38c0171e7ec928bb02db68dbf98574fba2d6f48e2b835f536f799afb934c4bcd56fc955c42b8786c6e01015e5f838f52e07a2","ssdeep":"96:3AiyJgiu1BGfsPCQ87p+7hcAhWWt85sC+l334XteC14UrSYqpJVH4eNQ:3LyJgXBGfpH7p+jp8WC24XoCOpJYeNQ","tlshash":"b9c17cf03d41f0e3b3c6904bb9484006a293d48ac6dcf2c1b52a7193dba5a6a2668864","first_seen":"2025-06-30T14:26:49.375663Z","last_seen":"2026-05-11T21:14:43.200741Z","times_seen":79,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1117\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 9266ede6-c0a3-4bbf-bb4e-274a10e8c2e5\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -kOEcaLKXuklLhlmc_CJ8A3i-0SZWf-aytDg02fI31M19qfKbHM25A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3972,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e387ac35af84dca0d1f74e2199f82870","sha1":"e430c933ac350bc589e49c3353b4d91184805754","sha256":"8887e2ea8b12d171febd6f40ecf787801dace85e415d270f8ddac8e18d7d6bf7","sha512":"993c94649094be187508aecf85b9b3b2e155572ff97720cadd178bbfed25ff3405ae6b200c3b19127477ca59d546ffa5861ce8ef79256105d3d82c0ddc9440fd","ssdeep":"","tlshash":"d981d44106b08251fa75180d27a2f9a2966ef09f6dcfdfc589d12a7708f81f26718f12","first_seen":"2026-02-21T21:46:53.633488Z","last_seen":"2026-02-21T21:46:53.633488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/7.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/7.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 42550\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OT6sfQzHPnBZsjzb9bzimli5C0jBPM3tumMZJo57b%2B%2B9mqKUqV9qDXOpulC6vBmVhMFhVqVoXhRDsFugqq5WVfH7ArJ%2FkCqi7YKnHQ%3D%3D\"}]}\r\ncf-ray: 9d196fbe9af1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42550,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"77f5e8c0c5e08644d1389563ef59f093","sha1":"f494940e650fc06b758c8ec347f4c6c1789eb3bb","sha256":"8f096abdd2ad6e2414bf3a86fa617258ebd4974238cfacca2b0161baaa495981","sha512":"a4cbb669ce84697ad6556a4a340aa92da56204fd6e07e2f660e0b3ee2c1ea03f5062f23dc9b33253d5a647e13a12b72dbdb209c7d72575319a8e71faefa50aeb","ssdeep":"768:aHXyPs/78bA4PuPXrFrK38DaQrRVvZ1nzbVC9hmeJJR:aHmgP7ZI8mQrRhZ1n3EhmeJJR","tlshash":"6313e31399099f83a53893a5bf530f6c5f596b0ca5d27aef40271e877b603360c9e02d","first_seen":"2025-06-30T14:26:49.371616Z","last_seen":"2026-05-11T21:14:43.210513Z","times_seen":82,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/13.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/13.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 64756\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mICzxEDRD7TfjHs%2BVHsI4a0rmwg7qYl5PHvTSp7WFL3fp3M6orc0kX%2FsfYA0cz0BPNaodkyf7YupOa2JPQ0M%2BLoqapWnAz1vJo%2Bmvw%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64756,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"97515bf5411c5c014a52facdb1029848","sha1":"34fd4233a84afe14b0a723afda643c1abc850ab1","sha256":"f674c339a3e2a1ccfd846e7fe37a6444972531b98c96ed825e99bc4408302866","sha512":"c339f2537e656db39d0663759d6c08487c1d222cf58402bcc01e9127b82298302511ff9d40ab62b593f6ae236bd754e21f77f55dc0607ef3a491957f113b4b24","ssdeep":"1536:azce555NUKp0DUqI7lVUQkRZHpTFcKK4kAusQ:kcgv0DUvlVUQkDHpxcKpCd","tlshash":"88534913980897d2a06c42d4bd4b5ecc2f52ab2ce5d12def06134f9b7aa9373189d13e","first_seen":"2025-06-19T20:02:29.516298Z","last_seen":"2026-05-25T10:16:26.576131Z","times_seen":108,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/BTC.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 1125\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlLSwZ25OzPiMg1SAyI%2BS%2Fhw4FrsyH%2FO4nWz1goDx5YcG%2FTF5uTQ1gJsUgeS%2Fq2870TRb8vkVyMkZBWg2p5IB2dwe0QF8RUcfj2gCA%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-08T08:00:48.026272Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/card2.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/card2.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 4528\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44YIuPYnK%2BRkFpOIQ2IDTcuYDuUwN1yfwFcu09f%2BBBWdwcz8ErZKyb7TlWmiPg%2BRo1iUES5led7xxoCLBkKLz9dfFIWpL5kq9HWuvg%3D%3D\"}]}\r\ncf-ray: 9d196fbe8ae3a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"787d17f49cc145d078cec3f38989b144","sha1":"8bb854fe7462d3ddc152b958232a952888a14c3f","sha256":"c38f9a1f91724365b80b233a5ddc5b891216bf82bb05f7be521fc2e75bd3cf37","sha512":"8ab4bb5374d3d7133892ba81959d0a0cf9c3adc05328d644b2ef326e602907c6988dd9b1588cb18e595583458628e130943ed8b53d70d13dde7c03fcde4f6ed1","ssdeep":"48:+MvnJralQqxKPbGf3k0IJN5IloAhat2wxrYCrW3ETb92jw1M:ZvnJWlHAjck0IJ7Ifat2wpYkbb92jwm","tlshash":"7891cc06da5235c1664ea9b711d503596c334153cdc19c5cb4cd8829af303e91e6ebdf","first_seen":"2025-02-15T17:58:10.483843Z","last_seen":"2026-06-05T15:12:51.713986Z","times_seen":383,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nage: 418\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-08T11:36:22.698994Z","times_seen":22074,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":23,"dns":7,"connect":28,"send":0,"wait":66,"receive":14,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/chat.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85P0cNJF%2FoqieQqV2Zp3ZjTQTwe08BPYxWW7x%2F4tVJ5P5qbEKz51tcPEJjFvU7eSYkLQLzjx9%2FfuwJvtZXst3W8LQqlayVluHpQGkg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb0ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-06-05T15:12:51.530116Z","times_seen":487,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/3/20390302410bf2bf.p.ttf","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/3/20390302410bf2bf.p.ttf HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZesJ5vgAwOpqyFI0m5I%2Fs1B2HAE8sh8B4pQ4jpylUOhDyeV%2BQyreVlEVnDAjcUJ5Yxvu4cdbYEY%2BiG7ulsRMZvp%2F1ejIRRdhPDJ5A%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d196fc41bd4a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73885,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"4aa5f42c94a7e025133566fcef661413","sha1":"6b8afd79dd1a8103950761a3ea7291dcfdbf3a54","sha256":"89f49d0253481d894b0bce9592eff6fb0fc79a58bb478d3dbbea18da1cd7e526","sha512":"a7a2723b05e005c9c8600b94e5c63c3950f7fdd33490a43541cfd392c282a3f492ee875a2039ddce9bc2534a3a5166b6dc2c20d6e87eec3f750326decfe4b835","ssdeep":"768:fbqVMGhM2EGWUWvbnK44447zHItQmyu1G+OAr:uVnENdnf4447zHItQmDG+O6","tlshash":"1273826065c0585281378398a6b297a9fa6580579b8ec68472fc3fc75ff2e81cec351f","first_seen":"2026-02-21T20:32:03.329038Z","last_seen":"2026-02-21T21:46:53.599576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1101\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: cdf53473-72c4-4ea8-9006-f6cd5da12263\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ScJKpuxB3e4SUDvYSE_QYgPIVwc8SXhOBFZaur8sHlqemAv3oqg1XA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3866,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c1eecab0c5ef8a6362546abc65008573","sha1":"f2044e008a7e9a81994637005129eb9f1c9de434","sha256":"12e60974c2dc1c60b72095cbfd1dfecc22e6ee9a4dd3b813b659f2fb02daa969","sha512":"4976c7183e5fcdfb4e476704b923fb59cfdf3016a912026d01d4050b0986a95c5b5a4a7b12fc5ddee418c27ae77a475a59057cbbf45736e18b5afd5b63382a77","ssdeep":"","tlshash":"42819a00169c82bcfb3a490d2392f85d8ae630577eda2fc599aa397778e90b1170df05","first_seen":"2026-02-21T21:46:53.657488Z","last_seen":"2026-02-21T21:46:53.657488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/TRX.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 1315\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFPqUkVu8ub7zz7U4N%2FqTUVfNfVRpE9sMtY6trBG6tmWdQZms6%2BUJc6pcRUp8Xh%2Bp3MAiVaPnFW%2FoKvcVyR9%2F0GqoeNliPHUDKzvfQ%3D%3D\"}]}\r\ncf-ray: 9d196fbefb06a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-06-06T23:47:44.189054Z","times_seen":1032,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/noti.js?v=3","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/js/noti.js?v=3 HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cW%2BLUDyQgpNO8P4Nuf%2BmOe3ITdy5wyw6TJBSGdJv58CgViwVO365zPuB9C4RaB2L2PodRoX8vkcK9lz2X8RzL3sGHvPRlzd5hdeeGg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb14a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (344), with CRLF line terminators","md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-06-05T15:12:51.667995Z","times_seen":276,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/main.mp4","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/main.mp4 HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nage: 31924\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: video/mp4;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 1498752\r\nserver: cloudflare\r\ncontent-range: bytes 0-1498751/1498752\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3ArMTxl8Q5%2BnATn%2Bfr5mnzt6iccGEtlPkw9Ffa%2F9PPK%2FDJ4rONUbBcjinwJY%2FX4LvKFK%2FYqPXX1aOqLRRkjyzirJijJAq7TECqEbA%3D%3D\"}]}\r\ncf-ray: 9d196fc3ebc9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498752,"size_decoded":0,"mime_type":"video/mp4; charset=UTF-8","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"e6f6cc8302820deafecdbf07ee3e0f52","sha1":"1aa52b5da571b2fe9da72eb81bcd4c63ef2a56ed","sha256":"4fe3292708b0f310a363c70ead038643dfb60b713eb1b8cc6da9103bcf68ceeb","sha512":"57173d2e3c49f150e904c239e1324b1d868205077c2c9cbf47d7dd27be7532ddc4ee26fe32cb3f260d67e9c2b9d4cac47b4037c0184ef6603890538bde64f070","ssdeep":"24576:AwUD3zQn48MezV7miOypKjjbRsQIJ8zYuUDP/TYK8G:K8LMeEiOd/G9JW4sO","tlshash":"ee2533ef11a50e73fe77abb128b09bbb08cf5ce625491844f91c10f6474a9d1a180dba","first_seen":"2025-07-27T02:35:37.325114Z","last_seen":"2026-05-11T21:14:43.163887Z","times_seen":74,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/logo.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atTi1H0ZcR1m6NzbkilakgH3voELYQpFcu8yezvGh4zEBDgkY%2B%2FV1Xr4c0uhn3Eszhg5TvMMkJ80HUkURnxTz1GkB%2F7ktrjB%2BerdFQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31925\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fc85c99a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-06-05T15:12:51.539296Z","times_seen":220,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/1.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/1.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 63083\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xX%2FXe2JWtuXDb95DaN0k0eldj13DdNuRSquKMVuvwzbzUDYw1Qsq2wRurimtGqZDuVZ0GReuPCAzT2QWcCO%2BD5ehVQi%2FBuR%2FX9ql3g%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aeba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63083,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"40da477cfa7422afb50cbf7f79325673","sha1":"cfd7d53197df6fcc2e2cd2cbc701df8c9813844b","sha256":"b70c5b10102466486a02b2cb56f58db9cc3baec205d8c88578ba047a13ce6d37","sha512":"6110e53f7110a74d3501074da159b6d2f393e6ce4543b5177a4f19dbcfca0ce11327283477b4f37116eb77a4132f75e6c8f16d42d156afb08dd5a20a47edc815","ssdeep":"1536:abjCBIUhMCcFwm4FK0s55ri7cDg0aaaTyqq24PoQUUvfKkf:2qhMCVmGR7wg0BaOPDTvf","tlshash":"5d5338078c0c8b56a46893a57e031eac7f156a0cadc239fe05231edb7ea57760d8d16f","first_seen":"2025-06-30T14:26:49.400463Z","last_seen":"2026-05-11T21:14:43.153947Z","times_seen":82,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-product-perpetual.8e03c0f2.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-product-perpetual.8e03c0f2.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 4106\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOM0CXYlt7IWcVX2YnyQBZHubL3CfLk%2FeY%2BmVcM%2F8fo4UBfiNK%2Bg74tyDJDprZPksaTqKMApRI5ktqIRc7tvrij1WKitYQeA99ZXkw%3D%3D\"}]}\r\ncf-ray: 9d196fbefb08a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4106,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 237 x 163, 8-bit/color RGBA, non-interlaced","md5":"b85952e9c487b743c2f247a22e7235ac","sha1":"4f98674fb7b2d52ed2055538cdc38d7a17af244f","sha256":"a6708e7e5668b4e42a7f041b11e80f50da593cdc0d38c40da20190870fcfb19a","sha512":"187aa80590b05257d04c14385857f9bc8f9012e7edce22785d2f6281f168c780eb8df226faaf4a1bc64d1f03a0974ec49bcabd8739cf31fc434b57ba06d3ae2c","ssdeep":"96:Dhvi+032mz37rmKfk/HLpM1AMkloOwbZuCVQBHKPrZs3t5:DhviUO7Fk/rpcA2OQZ/WAzZsn","tlshash":"98817e45b6897cfce6584aeb497c4b2d1c3d954580489af17c860fc436aeb5cc0f7b44","first_seen":"2025-06-30T14:26:49.369045Z","last_seen":"2026-05-11T21:14:43.219216Z","times_seen":82,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/js/toastr.js","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFCK1xlvTuUoi7hwXfSLlN9u536fQ2mQExPJIfrvtGkZ9jsXo5DAjn%2FV%2BZInAIFHiJCRSxpjY05TJ8FmEek1F%2FztLOiq11itiSFtoA%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb11a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-07T23:46:49.515699Z","times_seen":915,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1243\r\ndate: Sat, 21 Feb 2026 21:46:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f348f2b4-abc9-4ae5-9614-dcbd83402122\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0bMKvjw5BuKpkoXGB5tk7Qy2OACQdZbfspcd4G2LwEUH1ZFKGiCAyQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b7ac3e0838aeb1849dbcbf8ade12f2fb","sha1":"4de1bcfdc38d474a3d158f4a48d1b2dea24795af","sha256":"a7045a9458f5aa25f3afcf3fe5f624f650602b492b37a3d2ad9c1732272a8b6e","sha512":"cda43ab20af0e82fc17d6a26cdb86d5f38991c197265eb3fee8d3f02826fbb0de994b672445a8e1eb57d197a8c21c9b2d346e128a36351698dc060980ad69c9f","ssdeep":"","tlshash":"3a81f75116988250fb758d2937e2f8a58a6b709beece0cc58d982a7718fd0b177c8351","first_seen":"2026-02-21T21:46:53.67968Z","last_seen":"2026-02-21T21:46:53.67968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/2c41579cc59a1b71.css","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/2c41579cc59a1b71.css HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjFlybV6cQePaQgTy0d1oAKE65X49YOczUf9zyWhL6AlczqeG02H3st0TvzEemsEBwJwPlG%2BTWwBsq6ITmsVYprnPUB1Ns7MlCX5Rw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe6ad9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24727,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (24727), with no line terminators","md5":"c571a20c83adb269f19378d293e4f8af","sha1":"9928add86706caf7312c8208e01aae5ac8e68d2f","sha256":"af6b85926ee95926518d0ea5e45b563c4d414a44706bc61e23810dd9ff492766","sha512":"cecef0bcf2fcb13f37e376be4e5aeb48cf2fc8c67f0ec8ecd5bcbda7846facb5125f46f287751d3c7e5c489550ae59e7486bb16228ae57231932397347d3456b","ssdeep":"768:JnJrq7n9gIm78C3VSUqbeADUzTIomnYSEtwSYrcnH4P1JPU12LudrF3:V78C3VSUq6ADUzTIomnYSEtwSYrcnBx","tlshash":"56b2b38a8661613cfe676a30f8d946693104c855c673864ffe63b62ac9c53cf2274b3d","first_seen":"2025-06-30T14:26:49.360344Z","last_seen":"2026-05-11T21:14:43.205502Z","times_seen":80,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/3.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/3.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 68664\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvuRfeUpEgGzyYV6JcWvwcIH%2FayTvj%2FuucMY7wE6jLPhGelFkFI4Et1h8HwUu4rAhJ6hmS7nmHzqjUSUOvLzRUefu2lljScmbyhaww%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aeda9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68664,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"bec7618782ed69444aad9dff5e18e446","sha1":"fcb6f5264951b4fa657a53b0441856c475f33208","sha256":"9384d0b5e7b8c97313e30b0a0e1e9b0aeccdb7b48a0a769eea52f06a996f6fed","sha512":"0af020e5709cd32c0556e5d96f69cd4c9f3af5b99b49b8d793fe7ff614892235b7614c19b3104471caaaf602d2037951b77048b002ea982239d18b04953fae06","ssdeep":"1536:arXj5gOFB32+4JC9hY027Yidd2nyGONtz84DEzR:AThzLsC9hY0yddOkI4Dk","tlshash":"556359138c484b83a16d53a9be174ea81f092a6de9d27bff08631ec779153361c5e03e","first_seen":"2025-06-30T14:26:49.356516Z","last_seen":"2026-05-11T21:14:43.184941Z","times_seen":82,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nage: 26876\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-06-08T11:36:22.704423Z","times_seen":21603,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":39,"dns":4,"connect":40,"send":0,"wait":66,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-product-copy-trading.2edd80c5.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-product-copy-trading.2edd80c5.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 9983\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLR%2BZEvDgVAyQvl5XeRZks7mGAl8r58eNWeJ4G9MI5mUdjGl7nhaZN4%2FX0REPxGHQu8E4bve02lc9cThxAmlhC9NCjL7w%2FtHhft2Ww%3D%3D\"}]}\r\ncf-ray: 9d196fbefb09a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9983,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 285 x 154, 8-bit/color RGBA, non-interlaced","md5":"995c6237ef908602463b177f2c7e89b8","sha1":"e6c28ae4f03286f7ed6871f453fde91a52258bf4","sha256":"64310a7cc0e813fdee382f39b532709e63bb2d8d0efb0b76c0689d064b8afecd","sha512":"793c172790b28ebb2aa93ca0c6002842af5599e87aa5912df840ca86e310e36d7bf38705c60586900ed74260a5974fdce95c1d8c9f6f966319af26baaa69f68f","ssdeep":"192:Jkdhm1qEwbAG56gj+DNl+6xqzzXc0vs7yOKUwZpjAe0coXG8QCs1re1souBR3B:udhGwbR6imNhxq3c0LRflxe17Q","tlshash":"2122bed2b6f641b2883205d4da1e04b7a67ab0d22036dd1fe224b8f3063fd49b48d8f4","first_seen":"2025-06-30T14:26:49.40483Z","last_seen":"2026-05-11T21:14:43.1998Z","times_seen":82,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/arrow-down.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyTNQx1gR5FxVfdLo1Y9MQuifAGwXHnemzzvuGwZMSDfCAdQCE1k03D9PEe7AE8gxwvX3vwhl2XbsL8it3SBnb%2FiZ2ABRrtmMzJQZQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb10a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d0be16ce06ea0a66b8c8be201c88f71a","sha1":"03afb7918db67625b2365659d303a057071773eb","sha256":"3e6f14737272b9e9e4b60048aea76d784d99ed190878112b91f2cfba0c6fc77c","sha512":"c26291f4c90c6fe57adfcd466577789d483352812391a587011e19e0e8bf111230722309775ae62ef605ce3ef8bc7efe533b18eef7fbfea696f60205f169c245","ssdeep":"","tlshash":"19d0a79841d84d2ce6664650d7783664f03e10735f894188ea52713ed51a6cd6c339ec","first_seen":"2024-12-06T22:27:57.083257Z","last_seen":"2026-06-05T15:12:51.557656Z","times_seen":426,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/fonts/inter/Inter-Regular.ttf","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/assets/css/root.css?v=4\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6djlMYVMEk77gdFabbbp91GcbNvVtVZVCMiW8iZGgG2D7MyrYco%2F3P9YOqCAk9Nafnk93HoIvJQC25GWPJJInOUmY2wtnFEdgKW62A%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 4497\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fc44bffa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-06-08T11:53:07.882156Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nage: 4631656\r\nx-served-by: cache-lga21978-LGA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 56968\r\nx-timer: S1771710387.104333,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T11:38:59.930079Z","times_seen":166455,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":50,"dns":4,"connect":48,"send":0,"wait":27,"receive":15,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-trade-us.17c69a08.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-trade-us.17c69a08.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 8593\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2GL3yJjE17IAGCOZCilT6rrXT8rpObwFsxFF8O8SVMwmeC8ldyg6VyGq3XcB2kR1ff7UYujPIjVHGFi%2FwPXPZif11ZZfFxYClWJOQ%3D%3D\"}]}\r\ncf-ray: 9d196fbefb07a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8593,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 352 x 291, 8-bit/color RGBA, non-interlaced","md5":"79da6ea5eb9245bd777dfaef672a4c49","sha1":"598052eeef651426614d96e9db610810a215533a","sha256":"3bc5face37504613009afe3d1fec33333cb83011273766e14b96c3bdc40526d3","sha512":"04ee6dc01180ff02f6b98d40704b3f53d2cf3e690d994acf1968f4b4aa66da59758714589874e023676abda4297867e562c4a44a017eb07f3310a91c70e66ea4","ssdeep":"192:yMlMkjn4HU8SiZ39LJ+XDjoihr64yP/KfoAvHHHHHHHHHHHHHHHHHHHHHHHHHHHz:yMlMDHUAZt0XDjVhdLfnvHHHHHHHHHHT","tlshash":"15027d8422678c2cc42bb5b9687249cd3df429ee53fe586710ef2541567c1a06bd4e73","first_seen":"2025-06-30T14:26:49.409171Z","last_seen":"2026-05-11T21:14:43.198441Z","times_seen":82,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-licenses.15fdb7a3.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-licenses.15fdb7a3.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\ncontent-length: 3441\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbgS%2FyyFeiYWwIrY3m2jAxY18gSEcLVALBHFt6lD9lXIZEgA8Ho549fz8BTC6AGZ1ofdJnfzAiJjMtuKzfx50swxSxOiix66qyIjOg%3D%3D\"}]}\r\ncf-ray: 9d196fc58c20a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"e88efa048b378f49b6b1725b9300852d","sha1":"88f26369baa43df3bb2f0cfd4f008710fab269a6","sha256":"043aa560c2f8256f6ec58a0188f2b8f9e83dab1ac9b5d57dffe5dfaffd92bfc8","sha512":"2e156b8f05bed743fa8aee7a0cb459a06ca4f30360d7e9b38cbd371de7260c6384c62d99af8dc4d64eebda750c23be9170631396234aa05db49871e7a9c639bc","ssdeep":"","tlshash":"81615bd4e3f3e5684d9613f904bc77cbd438526c92dce830a3195c0d9668d8e64beaa3","first_seen":"2025-06-30T14:26:49.385532Z","last_seen":"2026-05-11T21:14:43.193742Z","times_seen":79,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1210\r\ndate: Sat, 21 Feb 2026 21:46:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f0ca9da4-68c5-432e-b82b-c36b73e08a5b\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 7dzmW2E2K6YQUAYpwnifaqIMHGX5Y6CVvtdK3RXTN5sF07e7Wfq0jQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f9bfa77c9ff2241eed1361c06f759deb","sha1":"646b9c78967884d0a3754a08d145566252881eca","sha256":"8ab5e8b83a908f45be458d1c777d372421208dde982770333c0f468625924952","sha512":"9abf7815d2e77c04a2b77685822d067693e7c21c878dcbd6a074ebaeaddae103ccda7955282a99cfd28a5a874996c8c1cb1252c3306c5bc0c6b30686ee1ed08f","ssdeep":"","tlshash":"6b81d25217b483a0fa398c0d27a2fda14d66b49bbeca1df185e06db78cf50b91748311","first_seen":"2026-02-21T21:46:53.716834Z","last_seen":"2026-02-21T21:46:53.716834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/logo.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtSffUuw%2FkHg4%2FnDQQio9aZ7TqrFqV4tp2LvCxlhR497UppPjCdp1NFVCS3r6WlPQtyuCJqS7S9nD9Zu5UA0YtfBWxgtn3m4ppP2xQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe8ae1a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-06-05T15:12:51.539296Z","times_seen":220,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-verify-account.4b1ffa0d.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-verify-account.4b1ffa0d.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 23634\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y49t03c3GX33HdqCgHm3EeJ3uTKfqbIb%2BMm%2B7eWZeTmks5d%2BzutjRkbgs7wgMZnEReXALMv5voDVmgk8f1XjzEyTmExs8iCUjMMFMQ%3D%3D\"}]}\r\ncf-ray: 9d196fbefb0aa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23634,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 570 x 440, 8-bit/color RGBA, non-interlaced","md5":"272b85a0c0a7030abba33f10b9569dac","sha1":"cc34c7eb120829198f94e7d87a0550537ff4187e","sha256":"af20338ef34fe18ede115c6b9aa5e1292639165e175e8652b22de304e7cb05db","sha512":"3f67c1db68929b273006c8c579f1d9b2db30a1d726b03be08eabcd89761276fa2bf3f5847563206faf05fea402e5c64e6c9f5cbca07bef2a5b22de77c9e0a84c","ssdeep":"384:6cnhYzGwLBEMTgCNHaYKHQIWKdxD4GIp4VVTNpFeN2sfGn4vvD/T/6UUf7cFtcCQ:6ggDEMTgAHaFwIWKdxD4G1VxptySUUDv","tlshash":"6db2e16c10c0349bc67f694a5d8c2b3e39afddb63cf5ca29d0a7299806314244f6e933","first_seen":"2025-06-30T14:26:49.348642Z","last_seen":"2026-05-11T21:14:43.211281Z","times_seen":82,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/card.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/card.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 738\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YywY%2FGFPSRo30eQXicYgoI3he8PfI8XX8K%2FwZ6MROWzrgs1fP92lhr0pYm9ipm33zU6IG6tB7AAayqGeCPeBtmxQbtB3rp71P%2FGxBQ%3D%3D\"}]}\r\ncf-ray: 9d196fbe8ae2a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"ac99733531433a0796fc9be34c7c554d","sha1":"0e4286554815249bbf875c336c3f1a74d28dc72b","sha256":"105ecb0d39ec901cd50f0e0f31a037f8650812b1bd9c803b58166bfff0e823ea","sha512":"55ee9d763f26f870211206977a6954d9a7c8e2dfa40647551c4f19989b686665df296b49d457ba7871fced97d1164818feb3cf8301bd2bb00e386c55a67dae65","ssdeep":"","tlshash":"da0165cb26804f5e0d2f30704f53d578106c885a89a61b6d2e00e0ba0c20a85e925b15","first_seen":"2025-06-30T14:26:49.361581Z","last_seen":"2026-06-05T15:12:51.651645Z","times_seen":189,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/p2p.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/p2p.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 5440\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwgMc0Z8oZZ28PO%2F34hFnio0%2F62A97rmd%2BvdzA57V0UZTo1VGMnaHoGEzgjnn%2FrL%2FS9MsF%2Bbyzal5zsTeBXdtcBd7xTscf6PI1sJ8g%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aeaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ecf394d33dfc28501d3f92f99d490660","sha1":"0a51f4e56a04e40a05eae931cd68d86750a2c43e","sha256":"e003384304ceacbe2ab8f0abdf2ef74e1c8fc3b2a58c93a43d46afc0c3499eca","sha512":"c7489bf8a174dd7b4ee4ac736be0384eaf9a8601e60f777faa9d6c8803967400e579dcf81536182ddd4535667f252c5818038c9c2270c768f937c0d6eb66d42a","ssdeep":"96:+cVYcgk0I8QIMIat2wU9bmdT5DdlBa6hUGDN:wcgkrMa7HBaqZ","tlshash":"62b1d91ef92231d0224dae7725ec61155f3381979a81ac94f9cf48521f142ab1c9b6fe","first_seen":"2025-02-15T17:58:10.485235Z","last_seen":"2026-06-05T15:12:51.674029Z","times_seen":383,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/12.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/12.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 204051\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eD8eFDX1dvM8lt4gj8L%2BkRZ7VpH1QMoeh9oUInFeytJn4%2FlUdVHRkSNSEkhYnaRNR89wpiflNRO0B%2BGfs3DyVWAnwUm4881PRxOzlw%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf5a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204051,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"e8f2c07d9f6746af3e1dd88c03cb06d9","sha1":"77b07ae461efceaf2d64518afef0d8714f8f3c22","sha256":"1c289b404d6b36473f0f92abe2f8d3d8922240dd7ed98a563ad0c01d922356ea","sha512":"b1f894afc9829f534924109e95c2b1d733b8ff29866e757149d484b8af1e4adf461622825452f399c523afc5d9a0705ad3b8ca33c1866a8b096d275179a22d16","ssdeep":"6144:Ty4H1wc4LBUm7bSh9lTa46RYrSWgR1/pu:W4Hj4LH63lTa4sYry1/I","tlshash":"5814df78f3d3e368175f26ac883c3d370b561ac842d9a19328136c49b69dfb9696317c","first_seen":"2025-06-30T14:26:49.414515Z","last_seen":"2026-05-11T21:14:43.231436Z","times_seen":82,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/SOL.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 404\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BK2rDC4uIyX1H8KMEKS0onhIJ354N9Pk8xosE%2B312XMY0p49loVCCRsHXB7dZPZP15%2FX6%2BeXZTHuJb7uQ1ZTgSUgAF%2FzLbrTRoHJlw%3D%3D\"}]}\r\ncf-ray: 9d196fbecb00a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-07T20:45:48.014583Z","times_seen":948,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/TON.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 24181\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CA2Ot71MsDb7Tmk1tBBi0YqaYYeXzkXBlvOOdm22HItoaDw9O7TQ4ge3ULLnbm%2FKnOHXscZUScAJKJG8mAKV1K8nZ8CfAN%2Bnps5%2BQA%3D%3D\"}]}\r\ncf-ray: 9d196fbefb04a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-06-05T15:12:51.575515Z","times_seen":462,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\ncf-ray: 9d196fbefff8c759-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 276070\r\nexpires: Thu, 11 Feb 2027 21:46:27 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=woNdoCul%2BxtE%2BMaiydWPJWmA4psigvRQTD53ZqenBlKC7Ta6aju5uHw5XzyyedNnFfdVhugzRlH97tADAsKW1z3UpRUJ9MiOCw7reVidLBHqpEBpUXBkxjoUdhZDCagmiYRs3%2BU4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-06-08T07:01:41.238197Z","times_seen":5811,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":34,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/ETH.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 1100\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRNGIB4AcNSdJOEPa6%2BhZdbdzB6XbQLStvRVBmXNaUwszk5POLZikrkZoibYwvFXvjDTIQSccQPJh4z5wO%2FsTBvjvbfkgkjHpqGKkw%3D%3D\"}]}\r\ncf-ray: 9d196fbeaafaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-08T08:00:48.034157Z","times_seen":1645,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/8.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/8.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 193889\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pamvutoCXnEf5zlTdq0nmiyYmDIUesyaoBruL9gGKgKANfabLkGxmnalSrA6nBx3eD7MBi7E8ser8AVPkcklDQY9Tg%2F0HgHnJLsGVg%3D%3D\"}]}\r\ncf-ray: 9d196fbe9af2a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193889,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"9be04dc2c6247d8b3a96481ee29b74a0","sha1":"d16ecc06fe4fb39eb49f8419a641f6b27a77d606","sha256":"8fdee0771929b980d0ca313f0feebd88c0d270a335acfa285599e0001699df2d","sha512":"511268d61e9c918607003dc7959ae4ffd41335a56cdbf57e512cd67405cab65ec383497a4a8c1322c1c869a6e0bd851877508a47ec185fb7ba23f3dee30c4a13","ssdeep":"3072:aBzRHpoRExoagELfsSTQSzvNWsKZ3a8E0M0qVj3/G/m7wQgz3n:aBzRHKEq60SkSzvNWsUEluuWL","tlshash":"d21401b1fbd3d7a94f2b615d057cbc3b270e05ca0ae1654359436c18b618fb9861ba3c","first_seen":"2025-06-30T14:26:49.333477Z","last_seen":"2026-05-11T21:14:43.216653Z","times_seen":82,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/4.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/4.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 74130\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLrrIlrVnzkYmx%2BRB%2B1RUpgl384Iguu0N2nipqFhIejaF9UJ%2BmIVKKLYFCQwbvqKiw%2F7b1GrPXfDRCg3PP1pPDbv9x303l1IzY1GBQ%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aeea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74130,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"fa48d22dba7c8f5da5e4a42ce61e2819","sha1":"52ce2ff5b14ea7cedbd9f16416cc6db4e5f07152","sha256":"26a98c93e18e36ecf60f50544efb84a9edda0dd360983085fdea1bc4e73a8b93","sha512":"3eca9b56c9933c093dd0c09307646703af91880ed82c35f15c6eb498dc8b5c9469c6321ae087f1eed0e1b270765d8d74780b9944e819f384255be17e49a374a8","ssdeep":"1536:aGIkVmicAeVdn4oAfh8W7prZIaQU5cRETFk3lVCBh2GI4apqy4MsPY2mI:tIkVbcAeVe5pLIaQWcRAFBBhi4apJsPZ","tlshash":"40732617cc454b93a8a983bcbe474ab94f086a0ce5d63aef01730e8736647765d0f16e","first_seen":"2025-06-30T14:26:49.40716Z","last_seen":"2026-05-11T21:14:43.156835Z","times_seen":82,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/support-logo-chat.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgkM7mI8SOcLuMS%2BokeZ2H9K5koEg7aymDiWRwhxlaoZCfmu%2FCgjLtYEDRxTLuFlNfCM72uzqtx6z%2BVh3%2BlaGIT4UXIuM6UV8zuXpA%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb0fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"911003c9a49f882d73fe4c40511816f8","sha1":"240e8d2f0cf44da1b1cf801a1e3eab472d081e34","sha256":"1192299763868ea940054d1bb7529b95620f02490f8f42aba8590a9df6d394b8","sha512":"e1221ebb601b7d8723f7d84c6e9c91aff64ffbc75d66ff89dba9f4499c1c8ef0f09e9819a00573c8302b295228c40cee0f306b92ebdf8522a41ea6156ea1236f","ssdeep":"","tlshash":"363124f9f7edb5d4f91887d0539a56b07b5b21fa7623c50807d21ea0f24162e04a988d","first_seen":"2025-05-02T21:59:25.084344Z","last_seen":"2026-06-05T15:12:51.64523Z","times_seen":424,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nage: 12366\r\nx-served-by: cache-fra-etou8220052-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 71722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-06-08T08:07:10.865533Z","times_seen":4835,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":7,"connect":28,"send":0,"wait":26,"receive":39,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/0bc386c2ced4fd85.css","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/0bc386c2ced4fd85.css HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JztRNmSpH8%2FrrFlU9DStSSkDXi5Uv1pf0dgR4lWuPhdpdAqXy0%2FPHOmMQu8d285uGxT2B30uW2veU%2FpP1P%2FStVzSuiCRBGl21FG2Kg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe6adba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32944,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a458c40bd6cf7610708540365dc0c4fe","sha1":"b06a85ef920480a177265a198e47161764a6e6e5","sha256":"f5a8c45bddb36932770748cf44d3147be03735816bbb8bce556130c4ac4197a7","sha512":"9af52a9921c5031fccd66516ba5fde4620700d84affdd532e9bac5461fc81e3ea61c3a44b2ee717b295aa92e7aee32c39c59390eaa1dfc3d5fa27318460b9cad","ssdeep":"768:CliAfQbmf5s2jSLl3L0bY+F+TF8dxe02kCoK5eSSVT:tw","tlshash":"c8e222482507321d633ba7947bf02b966e255c32db9b41beb5e3214cc1e837938e279d","first_seen":"2025-06-30T14:26:49.380538Z","last_seen":"2026-05-11T21:14:43.232636Z","times_seen":80,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/3/526d8a763de639e0.p.ttf","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/3/526d8a763de639e0.p.ttf HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRSCcEKDe6dGonZY8d9woNHNYsNkuIGhZ2AKAeUhjNuBM%2FWB9kinqk%2FreN%2F%2BqkTplA%2BPXnA0ts0rZvs2APJEiFVBfTLZQIh4F9oIPQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d196fc41bd0a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":73885,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"4aa5f42c94a7e025133566fcef661413","sha1":"6b8afd79dd1a8103950761a3ea7291dcfdbf3a54","sha256":"89f49d0253481d894b0bce9592eff6fb0fc79a58bb478d3dbbea18da1cd7e526","sha512":"a7a2723b05e005c9c8600b94e5c63c3950f7fdd33490a43541cfd392c282a3f492ee875a2039ddce9bc2534a3a5166b6dc2c20d6e87eec3f750326decfe4b835","ssdeep":"768:fbqVMGhM2EGWUWvbnK44447zHItQmyu1G+OAr:uVnENdnf4447zHItQmDG+O6","tlshash":"1273826065c0585281378398a6b297a9fa6580579b8ec68472fc3fc75ff2e81cec351f","first_seen":"2026-02-21T20:32:03.329038Z","last_seen":"2026-02-21T21:46:53.599576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":112,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/logo.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXX62abRQhNnmYZf%2FC%2FXhZKOAlCzRBgphnZ2CL%2F%2FkcJbBJGfuGHL2StXDs8386BfmeGulJ35Qg2J2%2BG%2B1RGUNTUncSr25gyR71mTqQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31925\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fc85c9aa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-06-05T15:12:51.539296Z","times_seen":220,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/heat-map.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYMniFg0Z0wLMFSo4MAJhB76xkLJbARq1AJuALB%2Bx9qfFZc3T%2Fb%2BQfooTGgp%2FXUSpcELMUO%2BUouH1wLirIutFOmwfmluqnbCL1hNBA%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe9ae6a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"16852ba4bfe972606e98728eee8b1f55","sha1":"7f99153c01c571dbd8fe8c27fac5c96bc67d49da","sha256":"92f2e89e2e124f61c1eff8695ff4fe2e5b7448a5e95ec0c2770100c0234d52e2","sha512":"d6ab0d87d30ec3a061755b1ad0b0cc752e6fdeb4b2becd5a28d41a57031f0dcfeae6330c8616a8d61e87bb041722aad955523728aaa2843b3630a52ef6196c7d","ssdeep":"","tlshash":"c841b8e5573985790b18d72c5a7a7a0a1ef214d7667084acfb2e283a3743dd310c0f98","first_seen":"2025-06-30T14:26:49.403614Z","last_seen":"2026-06-05T15:12:51.536068Z","times_seen":120,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/DOGE.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 2808\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyHycaM5%2F2l3sq7qybhhtaLWYdWcYGC3TcVx0PNNpdADW0NLOq3bLQLW7kEnulqAah%2BBhc3K%2Bf7YDXYmpp9DGHJje3zoE66yTC9IOg%3D%3D\"}]}\r\ncf-ray: 9d196fbefb02a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-07T23:37:29.545597Z","times_seen":915,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/untitled-app-modal.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 9947\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E81IojGL9IuqiqYZExqkRbPWOGsQ3PTNav7igV%2FQqfTj9oV0ZK4er69SLYMwTKJZJJg2zRSJTxagcLl%2FPWgmC%2FShqKzOA3NSxkO1LQ%3D%3D\"}]}\r\ncf-ray: 9d196fbefb0ea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-06-05T15:12:51.600657Z","times_seen":385,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/market-cap.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dpg8XQoX0lOmqQn0oGIQYpi3yo8cVwQKLvl%2B5T7kbgEvDMe%2BEVmhpe%2BCuWbfTdRyTnGWKxEOOhtmHCY1pBaHxM9Ppw3iLaXUzolY7A%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe9ae5a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7b2ff8e89bb97a7d20a382fc15f25538","sha1":"08daba877d46e4e88d9831380c5b0a5c6dd52bac","sha256":"61987960093cd56ae16730c31b394789b6c2c28059097a2a4c8d17748a408f22","sha512":"f4e0544203485593cc6d699798bbf81f6472da6b624ff037fd2549739589f5221b8298c9dedbd30dd10fc4667293d490e1cc1762f5b0e8485ec6643ef8abcc9f","ssdeep":"","tlshash":"f74152e80765473e5658eb015aba4f4974206092bf62018cf36e3d1bbbd2e9b248cd65","first_seen":"2025-06-30T14:26:49.370438Z","last_seen":"2026-06-05T15:12:51.534713Z","times_seen":120,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 262369\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T11:35:19.979101Z","times_seen":181689,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":98,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 262369\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T11:35:19.979101Z","times_seen":181689,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":167,"dns":2,"connect":17,"send":0,"wait":8,"receive":4,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1418\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: e202ef25-bfa6-4f70-b506-c9d83c260033\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: tcRlVg27oc4KwdAbdJQYwAPvqtBps1FTzqF_hSGbRvJufzVYM0381w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"677961055612269bf3391a71730116cf","sha1":"0b6e6d4391de58c9e0af295c1645314367e5590b","sha256":"343fa5619476a54d0f974fb028090b0ab227035853e69f41c0a45d300c5e0633","sha512":"effdc434ea490f14df9ceb1024781a312650ba0f0c26ac98a744244703a6d5cca74a188b79679899830e6646189de1d883cd90c9e6d4b8d97c9df93dc2ff0808","ssdeep":"48:D2BhuR3lFW+UHNL5O/J7iC1hBRJSXjtEW9M9cZlRkSXuaMhJo:u0R3LCNLizhNC579MSZHkJvhS","tlshash":"f9918b591770d394ff36880d3796b9a63a6a309fadce0ec085d46a7349fe0b15b08711","first_seen":"2026-02-21T21:46:53.756494Z","last_seen":"2026-02-21T21:46:53.756494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/c5fdf5e30258f13c.css","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/c5fdf5e30258f13c.css HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0q5yJNWavKss3dczdkYDjK0LO4q%2BUYPnqqKniG2bGqVIjjFV820chtH64oAYEj9K6UpCRUyh%2BP2Ld%2Fmx%2BSAcBtI6U8PSls1b3dbtw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe7adea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111103,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a08a45188b4ed8e0bf9f95748a91f476","sha1":"b72090cbeaa30811078d22c015b7b96dedc45cb5","sha256":"60e8ba22182fa49114bf534f1c7d1fbbce1b10fc5448f1d1f17c7f59a06b95af","sha512":"30d985d11ecfb3f3ecb401c6d4ff3cb530899d8d3be95743c6e9f87abdb3d2f0934d04003d29fd57060719f229784c37dea48dde991515a6c2699df02d6b3476","ssdeep":"768:n1JEn/Jjq/JX6IPX9NbcOgScYyjcCLXz0/IUZAJnQFSqaKupqiMxKu0846iN1:n1JEn/Jjq/JX6IXQZxqiMD4X","tlshash":"d8b322118609915ba1778b7c1ba50e00eacb6a73960366f8fecc31888ff9154939cfdd","first_seen":"2025-06-30T14:26:49.411184Z","last_seen":"2026-05-11T21:14:43.169011Z","times_seen":80,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/technical-analysis.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=he9j6ZVyq9gzx7N8kvBytvUyeAstwaaIvE2YszRo%2BJ8%2FtC7AwywbIDihQqaH4cAMwa3ADh2hIHB%2Bmgh6UuG0R1L2PjGFUjI821UPSA%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe9ae9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4cc28862b6416e60ba997d56c9a0c458","sha1":"96ddff9441ccd01b2ecb19802f2876382212d930","sha256":"e1d29d93771f480610f8a75c35f3aae9d0ed536342fb62bb86dc1461e10e6b2f","sha512":"29577fc1da20133cd20a2e4737ba6c63579c28e690905dd5049fb1f81c658347fb0fb20ce63a2cbaadd0a376007a7ee5f98144fcbe8372e7c3d2b462cd4e6fae","ssdeep":"96:+kUAfxrpn/Blg7arcU7pV7M3qIkLmgKGhbmnJRiUDDVod96:3UgxrbqOoq3KGqfDhoH6","tlshash":"6fa1738b033cc2f877d8642899723642367254bf5678a108f3bfb8263747f652255d58","first_seen":"2025-06-30T14:26:49.397587Z","last_seen":"2026-06-05T15:12:51.616897Z","times_seen":120,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/cryptocurrencies.min.js","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/cryptocurrencies.min.js HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEb64mUjdx1tquuRwrtuO6oyroiH1p%2BZawA4JyFlpRAbAW4SAVIIqqPKYk%2FxRp5%2FNKu4k0czIRCqFkSr8D1I86am0josao%2FidBv26Q%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbefb13a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (749), with no line terminators","md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/fonts/inter/Inter-Bold.ttf","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/assets/css/root.css?v=4\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxUjnzLAjFRwSOM%2Fu%2Ba3R%2FMBBp0e21LOmjdAsu8DQBfj45roDaMV5EjEEiHjcHIu6%2F8Y19Leinqf%2BiCaSR%2Bl%2BO4wz0NMXxkVYVY9hw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 4497\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fc44bfea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-06-08T11:53:07.910513Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":58,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/api/getLocale?v=2\u0026lang=en","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Qqs9SbAYT%2FobFMVsr39I8CKEl6g8P0GZTWmjbhCjA9QLRHPCfdNyf2JYXwynkbq%2BHNwF41GeplnOWdqeGwFqDAN%2FuNjZdKqKvAvHg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d196fc5cc3ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86557,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"455ef88b6e806dd36e01933cb8486796","sha1":"b34d87ca7b8fb0749e96d927defa59d79b9f947e","sha256":"4514f085486a4648a9d69c34d7a860374b4c6a26fbe5dcf57179c1e958c62dc4","sha512":"b817a42fb61632c7f5de86020b421452afc1fc1c14f0525cf2d9af8d40877df954bfca9ba83fbd107610dc419925255480cdf46d5b2f2362897334e8f1ea52a6","ssdeep":"1536:TE9dI8XPwE4MmEFG4+0c+VVSWelmDs1seF:TE93XPd4Mlw40+VVSHmDs1P","tlshash":"ad83f90b991e3d720bc613d1bcee5ddc71bd024091e1906a5aee84ac16edfc9c2e7897","first_seen":"2025-07-17T18:01:15.430578Z","last_seen":"2026-06-05T15:12:51.519004Z","times_seen":81,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 30 Jan 2025 15:02:43 GMT\r\netag: \"679b9493-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: RgcgYlz2HXFi7EyqqWI2Bb5-2UNT8QCTs9HAtguuQB-3LasDV_xdHw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-06-05T15:12:51.645977Z","times_seen":496,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":25,"dns":18,"connect":1,"send":0,"wait":243,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/9.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/9.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 85498\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Zm3gtnNMElNExZwjLTWViPsL08tnbgu%2FSdohIZmQxwQh%2FlCQfa04q0cwGTZnizbX%2FONGcSq2qzURrOOkvppY1weUt4JT%2Bb1gTK56Q%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf4a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85498,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"19baa07970e9e8c01ef748cd443bc631","sha1":"8dd4a6a845a45d838013b21d5bdff204aa6219d6","sha256":"f5fbf68c6230e19753027f4faaf4a7fdecbdbd6eea57b4ae37a7f94f833aa51d","sha512":"6029444d20ef89b9521c7b5f413d13019b2064fcd68b2a2390b754cfa19664247554652f84f1dfcd9d3390dd238569c3e605b0dbeb03e2fc430c8d0b90ea66c1","ssdeep":"1536:aDeSAD5Oy6W1U5OO7pMKfrzm3DDUzd3v2emfe4nAXDs:We7DIWK5tprD63W8embAXA","tlshash":"b5837b578818d793a16d93e8bd534e692f17270ca4d636ee01234e8f7e98b720ccd16e","first_seen":"2025-06-30T14:26:49.363006Z","last_seen":"2026-05-11T21:14:43.160155Z","times_seen":82,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/11.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/11.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 76874\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hniemJMyj9u9vcxk4bwOnW0gsncoLwj%2F8cU%2BAgdGu3tL8CNptky3Q1QWfrZuyC2xt6BbLCEV%2FU28jrw9VZ%2Flnlkd54Jgsh4gYAZ73A%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf6a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76874,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"eaa0d5d60c214fb0991eb90df8087673","sha1":"5019424950b4fcbdeb0790c2adad392c1d2751bc","sha256":"4d7fd384905307eb70f2aa61eea672f620733a30dffdbde8f6df547906ac5d81","sha512":"4089fb75ae054b2a1ef4ccf60d9f3b6d4b4afabcd6dd9e1497a259ce05d54c58147840b728b11d01129ed918422cf75d3db4ca0b1046ddb65605c11ba694fb7e","ssdeep":"1536:aq5T8zttpyb3byCTDD+9HsqCvutsQF0wlEfKCXjorQogSu1:H5kSb3tTDy9MMFflEfKCehgSU","tlshash":"9a735a5398059b539568a3e97e435e6c1f0b6b1ca8c23aef10734dcb7e687364c8e12d","first_seen":"2025-06-30T14:26:49.358136Z","last_seen":"2026-05-11T21:14:43.251087Z","times_seen":82,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:46:27 GMT\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-06-08T09:45:27.407251Z","times_seen":2015,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":586,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":634},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-ray: 9d196fbefeac32fa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 658591\r\nexpires: Thu, 11 Feb 2027 21:46:27 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ADguQr31GCiWKsrabd4DCUaeUf2NsR1NrgK22ca9fzRVYw8tf4tZv3W3dLS6juefLGlFWLkZjJLFYBtODtEeqzu8oSqWvya7l0C3FaAFCzg8Zp7hS%2FtPgxo5i9BSCYY7hq2nNf8J\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-06-08T08:28:37.866861Z","times_seen":2036,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":43,"receive":2,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/market-screener.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlsRy%2BclheGuK6W7g%2FOGNSnv%2BaxscfH6rcLHG%2BmdOWyyT7ubUpCt4mxosXxa9cL7jwES7Afm1n1TKAOW5510sjCsmKYOv0K%2B3Z%2BL5A%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe9ae8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4bc1b9af0dc3f4faa84f9296a1cd6f55","sha1":"19478f202a83336d5182ea98e36ceed7b44803e6","sha256":"47b6987b48b908d52d3483d0ce8dc4b0476d4d9840906830d150467aee1e4b3e","sha512":"4a7212cee040e5c766daf774d117fce6d5c0b001656123cbd08b57c75af24031fe84ab99beb868e1552135da8ea034d0ccd144ff86496a8afc97c307b42c0ace","ssdeep":"","tlshash":"7831ffc890d6c9f9aa64c70013f99f95386238fb3250099cfebc642337920a8309cfd6","first_seen":"2025-06-30T14:26:49.376998Z","last_seen":"2026-06-05T15:12:51.535404Z","times_seen":120,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-to-deposit.9eec1271.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-to-deposit.9eec1271.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 15968\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzHSBrUDFGasEQ%2BW3bB1NAmhRANn%2FW9PB2Cd9npcvww4uYrGTTswe28%2FkAalsiGsHY8W7ijsvO1Qlv4wxiI0bSO%2FV78YPSCK%2Bze9DA%3D%3D\"}]}\r\ncf-ray: 9d196fbefb0ba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15968,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 380 x 281, 8-bit/color RGBA, non-interlaced","md5":"bc6de78c20922b83dae5d98f1ea5ebb1","sha1":"efb206b80c530fc67b9ad32224291bd5d2fbe2aa","sha256":"a6fd985f064c4fcf02fde396a2cf0a20ea622349d5a82ea01b57ef3ccc70a441","sha512":"225219ca69771b44f7afda35c13c7420372327cc7d5dd057956ee2332f6cfd5c0a3675c8e8f9f78954f0b513af0b9d828944c808a4f8bc1d03007c2d7d0b9812","ssdeep":"384:/0QP1Z9hcUg7lqWnanR9OuM3C21FD4LexPq/NmLPAxtxPDjP+:pZ/chxqNsuM3C21N4YwNzPjm","tlshash":"0a62d0c0749175a637347dccda062de048db1739136fa91e773e36a880248276ba9797","first_seen":"2025-06-30T14:26:49.413366Z","last_seen":"2026-05-11T21:14:43.190236Z","times_seen":82,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:46:26.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8ILycs2904BfOv6gWOtb5ilMhz3DGZXYX226U5xKWWwnxJohLed4MldApv1iIf3eQrIYXBxbFIf6oDC%2BubreoXCJp36NYwyfuDuWw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d196fbbcc0411c5-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}],"data":{"size":473500,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5511)","md5":"d62c3975d6aa43ac89fcfe22120d7560","sha1":"b33c7f938f9ea2811d943ddcdc414b383df875ee","sha256":"2af97ab44a892abf8ea844fbe4d70a8f5785eca545d75313f80b0bad46dea1d1","sha512":"d2bac183475601cc7208e8e8447d7e0c8d24e3b1b57c48fe41add6f053ba8599fa5bddd873dd5acabec73b74296d6f5068dfa42346ffdf86438fc245cb127349","ssdeep":"12288:9wJvUCcbIz24w24LijHOWJwuyX8svBhphLjhl5qrv:E","tlshash":"62a45b7063f11259b003c3a88bf94a263667e893e902c65877ec1dd0dfc799e9d9364b","first_seen":"2026-02-21T21:46:53.780295Z","last_seen":"2026-02-21T21:46:53.780295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":66,"dns":42,"connect":8,"send":0,"wait":121,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/header/cross-rates.svg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maEAohQB%2BgvYcAFNwsOMgPMY2posTW35NF5DfMRK3kqlSSSNOKj5pRnE5ClrGsxa1jIRXLxCmxDFJQuvMLP02J1yPkO83BlarR%2B1xw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe9ae7a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"02be597a3ad6a955e4e583b457b1e190","sha1":"823e50a255fa3017ed421dca17572f441a925f24","sha256":"8160468486c656c080fafa23f1287f381beb1e51e41c0bbcf61d712fe7bbe735","sha512":"0b147ed6219aaf3c56a216ad6ed39e08876c8682d5017374d19bdd9689fb36a425774e954209f3ae51991d4d4da48865756116a10956d6fd4f5c4bc35d9156df","ssdeep":"","tlshash":"1e51d943e378e674aa4caa5d71503a50667114bbfa30908887b61fae1c437dbb284e35","first_seen":"2025-06-30T14:26:49.339654Z","last_seen":"2026-06-05T15:12:51.632395Z","times_seen":120,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/10.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/10.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 39694\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqGy1acmup8ljN71rdrEW7euo9tjWh2LuxvwOGWusua1RT%2BjklJQ65GI438m3QKzhuBadRd9F2lzYjExBr3w%2F7Gd8zH7D3lo7N40DQ%3D%3D\"}]}\r\ncf-ray: 9d196fbeaaf7a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39694,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"5eb223e051d22043cef4f31711d00b0a","sha1":"5ffa87b40a2cf2134844959ddc31431cc91a3d1a","sha256":"f5a475695b41562f84145c3e551c9620e88f1e88dfab172f2f52089666e27288","sha512":"b757ae8a6ca274f3081ef9f52d0a042f0c49c3cf7acb21888cec8625a49ac8d49fcd31ea444fbec48c1535e8712b8febe628d75b352f7d95eb97f6160d29346a","ssdeep":"768:aCI2sjya/2vwcancw99PEd8ctP12jXQazkZ5/7zFIHbvwR3BWuRgnp:aCUeL4cantPEdd2k+I5uQW8w","tlshash":"de0384439d089b83546943e97e035ead2f4a6b5dd8c23aef00630edb7e647361c9e11e","first_seen":"2025-06-30T14:26:49.416446Z","last_seen":"2026-05-11T21:14:43.177187Z","times_seen":82,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1203\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f76e2b08-5868-46ed-8ab8-f540711c859f\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: mltSWN-xl9N1ffUHS6Xfq8zz_Gq8SdH0H445I-oNRIFLxDfNXdqPIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4010,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b339093df50f39641d1ebb76cc9eb82d","sha1":"5e9f4f8f7c5d26e7514f74ff01b6c19032bbe3b2","sha256":"bb54d1bc132b6c669e051df9b4921c3f4bd37af64a42e9eae2deaf4bac3b3574","sha512":"ec7398626ada66ac05002fe650887f2287dedb960bbf6d6bf59932594e5cc97436c3bd6cc5b418424fefdd5c5da5e849caf050f995bd7c071fa521bd8c45f068","ssdeep":"","tlshash":"0381154106909270fa3a494d379ef89a9666709faedb1fc0d9a92e7338f4071c70cf10","first_seen":"2026-02-21T21:46:53.786775Z","last_seen":"2026-02-21T21:46:53.786775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/fc74fa5d8eedd6f5.css","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/fc74fa5d8eedd6f5.css HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnDFroUEKxjVGjlaZtkXbmwMPP49fjslYkqxJ4Q15U8vaCKAFamcDVzxyO75TDyffGeCCAzBQ8wfl7VxyxOl%2FD%2BVFMoRKqNTH5QD2g%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe6ad8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201886,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"71cf8e7d846191a01d4ab42b2863428e","sha1":"414cc9bb8744def9526b16abf5109e1b4b2acf1a","sha256":"63133e7838be988e2653b299683fc411ffdb2eb0e7d9092876d4629d518dfb7d","sha512":"db1b147735317b7f9374c02e55a473f515bd33fb472da4413e7cd317b255b3394d8e820f7858af54882dfebe1daee00c0cf8138a01aa7a4e290ba6c2a7a4ee60","ssdeep":"768:yp8XqojIChhJdO9GJbUTAXu+hMDqpoFzJGSy/qzqwGNlcM1/CqEjlXB9Vxu6g4LX:OXCRHSyColcMYqK7DGr/0+q","tlshash":"e7141d4c481314070a7b8b3b7a92575afb9a10737a26dc577aec2c818f7917c90d2e6f","first_seen":"2025-06-30T14:26:49.344609Z","last_seen":"2026-05-11T21:14:43.192824Z","times_seen":80,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/home-product-spot.55ab8b1a.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/home-product-spot.55ab8b1a.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 12070\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diFGr%2B7fHBMyqUW04UwXitbzPAbARjNlghvSrroh7o2A5x3faxJB%2BwwPVHmWpEt6GakdG0guKgxJi3m965nyO8OeZ54zwM9MlDkN5g%3D%3D\"}]}\r\ncf-ray: 9d196fbefb05a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12070,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 211 x 202, 8-bit/color RGBA, non-interlaced","md5":"b0021ed3c2a83ef60d26544fea4fb5eb","sha1":"cd6e31b118e81c7c408a5fc5be00a9467e35ee02","sha256":"9548a016e904404565ebb9c3f743ea4e8332295409749c3228caee97f420466f","sha512":"e9682d3e6397f7c2a7d8d893323ce722c899cae4c2417c5576c1d90dbc471bbb9af25b8badc1e7ac0c33c5f821e1367f3d6b6ed182ca5097197346e66b99b0a8","ssdeep":"192:VtBBa/OGLISGwIAf2SKSAGkzc1HEs/nU0dAGk8VGgn8qdqQtMt:b2kSUAfxK6k9sddKd4w","tlshash":"8d42bee0b7a5c326368d95f80bc895ec4734e21ac424674f6b209b4d9ce58ce5e1c83a","first_seen":"2025-06-30T14:26:49.393005Z","last_seen":"2026-05-11T21:14:43.188376Z","times_seen":82,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wonexbit.com/\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1346\r\ndate: Sat, 21 Feb 2026 21:46:28 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 5c8935bb-13d8-4e65-8bda-cacae2491a66\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Mt0ovGqsnt5qo-_GvB7IdjI-z79v_BG0Vd0cyqnG-dHwgDl_QKblEg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4209,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"07fdd393fd3c7df4e524c59ec17e4d5a","sha1":"dd3b2bf3bce2a1c56e32a4197ffc5374dad95875","sha256":"8a73c517d7487fc65b57abf8f05f68de26fbc85cec4b8bd741acfab6adb99db0","sha512":"bdde022dba4745e740c036582df4ce98cc4a8b543c88a6fdd8ac3f98ee2bb9717f0998c2b261ddd4087bbcd0fb3e52377f6055ec698cb360ff647acd78f54ab1","ssdeep":"48:aW23pKp4UjqyTKonD5/L9p7A8oy1dPMaydNkdsy3Z790NryARx4zbhqoRkrn4VpG:S58Bsu5pM8Z1ZgcdtpsERGGTaPVf","tlshash":"ec918659279086b4ff384d4e2fa2fce57a66705b9dcd8ed984d07db308e90b10b18361","first_seen":"2026-02-21T21:46:53.793103Z","last_seen":"2026-02-21T21:46:53.793103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/2.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/2.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 69942\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2fl3ghGoPLo1IiFX9g%2FSLwLhuNXTjGcMga%2F4YfhBsAErOwHFVylZcPWLNgb6CrcXFmfhcHYM%2BwnVOoTRy0qSEtttwc5nxsMUKOwxA%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aeca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69942,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"4c50c8bdf56c727bf40642b2901b12a4","sha1":"58ef81f8d380535029ac9fdc5a0edc63e1f08a31","sha256":"31886ad9efcbdcfd8ad41e37d22b16e3c305eaca70e6f686a4a738ab59982ae1","sha512":"a269cccfa3aecdef2130c2ae2b45fbaf4cc521f0b478bdd632f4af8e7afcb9d0919b019151bcb34d30836fb03871690b3acec69dd65e3efc85296a99ed8b83ca","ssdeep":"1536:aaDU/M+3dn/S7qZWLbalPa0ZDqXsTDdLUHyT0xLVKfAvPrcFj3vY:tgd+qWbgzsXsBUySAjs","tlshash":"2a6348178d09db57856993e86e139e2c6f0b2b9c68d222ee00670c4f7eb83714dde51e","first_seen":"2025-06-30T14:26:49.342555Z","last_seen":"2026-05-11T21:14:43.258032Z","times_seen":82,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/img/5.jpg","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/img/5.jpg HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\ncontent-length: 141004\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTfB7bVXCXtPdlkYgXrpQToA54hP%2BvSI5P%2F%2F6TVNvOEjM9uPg3ftG44zAcxOnDq1MxdL6Fa40XDtu1i1kTWURkcsejlyH63WVjbTEg%3D%3D\"}]}\r\ncf-ray: 9d196fbe9aefa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141004,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"cc5b67f5e1ca710efc070af7df452d6c","sha1":"da9525b44993588f4fded2610a82413e827321fe","sha256":"64cea25b8c01b67395275fd13a33ffc874397cbe49adac6ce2898d6d1ab12052","sha512":"d960ea2b9fd4a8c6b9d0119ea2871b7791a83a17056649cbacf09acc4abe7a590834f79c20cb8e14cea07563ec4c02a3c893fb1d7eb6c2f3b0fc09de49771f75","ssdeep":"3072:aARmHH6J7i9kHYio/0x3t0mcrb9tWw2E5i7Cm7wQgz3n:aAYHH6YQY6x3tMv9tWbbVWL","tlshash":"48d3f13cfbe7eb624b4b643c11bdbc3b631149c512e426471a530d85ba98fb896039bc","first_seen":"2025-06-30T14:26:49.325951Z","last_seen":"2026-05-11T21:14:43.218582Z","times_seen":82,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:28.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wonexbit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 20:53:39 GMT\r\nexpires: Thu, 18 Feb 2027 20:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 262369\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-08T11:35:19.979101Z","times_seen":181689,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/landings/1/cryptocurrencies.min.css","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/landings/1/cryptocurrencies.min.css HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3Ruk8uXhumDhyhbwFyDP4sJDAutTclP7%2BjkXkP7SFK5FhVVpC%2FbHuTEVkiap5V%2BBka1VYZeyQxmQOoB%2BI8vcTFSfXoHNPl4AYxzrQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d196fbe7adda9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c48d4626628ace5bfe1c0c64945d7ec7","sha1":"dbc863a5b7f966d07100a55f028d363a0b6d8d15","sha256":"2f474dfa8379ea5e0416c77f31ccbc764e26b278447ee59273e9783043597be8","sha512":"cb81d136b60c77b6997ebffa314c2ca19e073e816f43a3d1337195c6252726f65a4b6b5a7ba26a101e2bbd9431de3ef5d9e63288381cc772130c1e3eee35fd45","ssdeep":"","tlshash":"da71f02aa902a145831b5e5cbbfc07268d295433b90743fb75d2ac8d81d97446f722db","first_seen":"2025-06-23T06:39:13.01923Z","last_seen":"2026-05-11T21:14:43.152405Z","times_seen":97,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wonexbit.com/assets/img/coins/XRP.png","fqdn":"wonexbit.com","domain":"wonexbit.com","tld":"com"},"ip":{"addr":"172.67.162.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wonexbit.com/","date":"2026-02-21T21:46:27.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wonexbit.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 07:34:53 GMT","end":"Wed, 20 May 2026 07:34:52 GMT"},"fingerprint":{"sha1":"7A:FA:EA:60:71:B1:C4:A1:EE:95:5E:9F:8B:29:19:5D:B0:32:B8:E8","sha256":"F3:97:D2:DC:8E:2A:54:19:E0:FE:27:AB:98:0F:AC:93:88:7B:F6:46:31:F9:62:14:85:02:8F:34:2E:D3:98:43"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: wonexbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wonexbit.com/\r\nCookie: JSESSIONID=03E3D96AAC6D1F610CCAC723A6BC5F1D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Oct 2025 22:45:18 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 21 Feb 2026 21:46:27 GMT\r\ncontent-length: 953\r\nserver: cloudflare\r\nage: 31924\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x83sw6SedIiR6DQpeUcMflrslH%2FnetL%2Bd3Lxqd7Hj2Puk6GNq%2BDLxctzkd2QkIkUSNZqdFE8tGgfop%2BQQ7RGsL7Sq01Cx7V7mqIVOg%3D%3D\"}]}\r\ncf-ray: 9d196fbefb03a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-08T08:00:48.021356Z","times_seen":1509,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"wonexbit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}