{"report_id":"c45a5c7e-4078-40ed-bc4a-e6ab573d976c","version":0,"status":"done","tags":[],"date":"2026-10-07T18:59:45Z","url":{"schema":"https","addr":"convexfinance.net/","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"convexfinance.net/","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"title":"Convex Finance — The Complete Reference on the Leading DeFi Yield Booster","dom":{"size":75751,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (802)","md5":"b15f2ff9106cfc77da07fc4d5fcce0ca","sha1":"431d365fe6bc8cc00a86275a412c53fe2c69d2f8","sha256":"0a6447b848d2057a46a83b316a139d1f3c4a00f45aafd2dba59e52bad6ec3e61","sha512":"9ce2d6046017eff903f437a7f578e5e54b19e3fd57b8566ede219e6c4062143239b1eade4b29d70552dd38b12176fbafd4222ba3ae921f5af729ffd37ac89904","ssdeep":"768:qnXPWNThPrpYX+J7xPPYVE1NVOv/ptpEKSrrBKHZ6U96FPnsRVJ9XXAeds9w3FMB:DNVPrxjPYT6ZzlsR1XwupFMgM","tlshash":"d273c723abd52379036202446a8b37d2d76e847ad3141425327cc5ae5bc7868d3fb7eb","dom_hash":"domhash2b5c53c681ac3d9214be2d642ee5dd52","first_seen":"2026-10-07T18:58:05.568831Z","last_seen":"2026-10-07T18:59:45.910324Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"convexfinance.net/","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T18:59:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"convexfinance.net","ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-14","domain_rank":0,"first_seen":"2026-10-07T18:58:00.972598Z","last_seen":"2026-10-07T18:58:00.972598Z","alert_count":5,"request_count":5,"received_data":115955,"sent_data":2414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"convexfinance.net/assets/js/main.js","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d2b109f4a355b77b91e949e62643baa","sha1":"7017e46c7f51ed4042a0c876d0ea2718b3d5cdd9","sha256":"5506a9bd8ad561cb43e27d13b8399c387a360f98a795e9363cd4dee502019069","sha512":"f52adf89c0807402c51608128107db207488f892cc1dd56a45dcf57c3ff7b62aa7761fa1678ae607b72bf804c902aa828c0d255b9fe17ebbfff314e850604cd8","ssdeep":"","tlshash":"3c11cb9d62b23071807338bac28f8254703240e330069e09fd6c4ac06f61979a6f2ace","size":1004,"data":"","first_seen":"2026-10-07T18:58:05.577231Z","last_seen":"2026-10-07T18:59:45.921816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"convexfinance.net/","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T18:59:16.307Z","timestamp":1791399556307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convexfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 16:05:36 GMT","end":"Tue, 10 Nov 2026 17:05:33 GMT"},"fingerprint":{"sha1":"6E:AC:40:53:41:A4:11:DD:C5:39:0F:AC:4B:80:D2:CC:4A:E6:6C:F6","sha256":"2D:C4:7E:5B:28:0C:01:BB:63:C1:47:3D:75:F5:A8:C8:4E:C5:C1:51:86:78:68:8C:C2:51:CC:A5:92:F4:B2:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: convexfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7yIU%2BTSj3Zrlmc3I0Phvl5oDjS5PQ0gn1SKaq8lrVi8WIUp%2FY0H4tc3fzzKfvagsrkx4PgazumvJ1BmqHr52FdIwdMPG297O01AmXH%2BbfzdvYaLDsnyapq5zZrgtmYzseWTzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nlink: \u003c/assets/css/style.css\u003e; rel=\"preload\"; as=style\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Wed, 07 Oct 2026 18:59:16 GMT\r\ncf-ray: a46f245b1b63dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75767,"size_decoded":21955,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (802)","md5":"e8746da395625994bd21dacc71168e49","sha1":"010db05d57b0af376e768919cdee83a76bc58026","sha256":"8f38863fbc7b32ec74ae2c179f31f8254b164877422c5f0363d6b25c52247736","sha512":"1193dcb42c224edca5d0d3ff22944f6652b254cb2dcb86d6b4f2eb82c6ed271d7ac0a0e08621fc96a20e42e2eb7ccb5c27963378b594e18bad99452ad03db246","ssdeep":"768:kvXPWNThPrpYX+J7xPPYVE1NVOv/ptpEKSrrBKHZ6U96FPnsRVJ9XXAeds9w3FMQ:hNVPrxjPYT6ZzlsR1XwupFMgL","tlshash":"4173c723abd52379036202446a8b37d2d76e847ad3141425327cc5ae5bc7868d3fb7eb","first_seen":"2026-10-07T18:58:05.573535Z","last_seen":"2026-10-07T18:59:45.917432Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":8,"connect":20,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convexfinance.net/assets/css/style.css","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://convexfinance.net/","date":"2026-10-07T18:59:16.601Z","timestamp":1791399556601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convexfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 16:05:36 GMT","end":"Tue, 10 Nov 2026 17:05:33 GMT"},"fingerprint":{"sha1":"6E:AC:40:53:41:A4:11:DD:C5:39:0F:AC:4B:80:D2:CC:4A:E6:6C:F6","sha256":"2D:C4:7E:5B:28:0C:01:BB:63:C1:47:3D:75:F5:A8:C8:4E:C5:C1:51:86:78:68:8C:C2:51:CC:A5:92:F4:B2:7E"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: convexfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://convexfinance.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=340tSiONWEFmQ7Hm9E%2B3IhyYyaKhhe8cXPp37QMhDq8U8avcnaR7GSXiFfmEpp5i9LTZMFtaeCw7sK33oEUw6%2FlrbMFnXWTBh1dN%2FndH%2Bz9nRZUMxrFt7Vk04911p1WBHTUtVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"2ef2bd371e9a6f79a7cf8022b1479f5a\"\r\ncontent-encoding: br\r\npriority: u=0,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 07 Oct 2026 18:59:16 GMT\r\ncf-ray: a46f245ccc5bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4857,"size_decoded":2239,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3813d817ea70623cfafa07e34e413bf1","sha1":"b6e02f2812c6a36c988a684fb50f711d70f3ee35","sha256":"f410dfe13245b3b385906195f5e5ed778c3f227274a76caf3588c466562bee89","sha512":"8e66bd5ef2c2d517f8fe9bdd8bd7ab505061621f6c954fa5e7bef1c5421560deea9db3be5a7c4029658c2477cb49be82973fafbcad6af21efe3d0c4ec73a9fa2","ssdeep":"96:ld4ElgX7CC7TObyKQChhG5Tszl8fxbPvQztG+DfSTAAjuZrFCqwKTl9A8re58a+v:z4Mye+8CBPv8v7Nhlm8Va+v","tlshash":"25a140872ab51904f45e6cf5b5a3aba1731c5083908fcdb8bff0612cde885a45672f0c","first_seen":"2026-10-07T18:58:05.575508Z","last_seen":"2026-10-07T18:59:45.919639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convexfinance.net/assets/js/main.js","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://convexfinance.net/","date":"2026-10-07T18:59:16.602Z","timestamp":1791399556602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convexfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 16:05:36 GMT","end":"Tue, 10 Nov 2026 17:05:33 GMT"},"fingerprint":{"sha1":"6E:AC:40:53:41:A4:11:DD:C5:39:0F:AC:4B:80:D2:CC:4A:E6:6C:F6","sha256":"2D:C4:7E:5B:28:0C:01:BB:63:C1:47:3D:75:F5:A8:C8:4E:C5:C1:51:86:78:68:8C:C2:51:CC:A5:92:F4:B2:7E"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: convexfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://convexfinance.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MygQedOiEtKJAWQD4QeLoQqzyR%2BByiq2P93IzJtARyleRME%2FOI3wRPkpc9QKRPyLYO%2BNw140paNG12D9zGJNWkll8fyho3PKSrSdBZe0K5WcKsNKAT2K208lcKrDrHyr6LGhGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8b0fa0b96db2b187c08e040d7d0cf412\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 07 Oct 2026 18:59:16 GMT\r\ncf-ray: a46f245ccc5edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":1285,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0d2b109f4a355b77b91e949e62643baa","sha1":"7017e46c7f51ed4042a0c876d0ea2718b3d5cdd9","sha256":"5506a9bd8ad561cb43e27d13b8399c387a360f98a795e9363cd4dee502019069","sha512":"f52adf89c0807402c51608128107db207488f892cc1dd56a45dcf57c3ff7b62aa7761fa1678ae607b72bf804c902aa828c0d255b9fe17ebbfff314e850604cd8","ssdeep":"","tlshash":"3c11cb9d62b23071807338bac28f8254703240e330069e09fd6c4ac06f61979a6f2ace","first_seen":"2026-10-07T18:58:05.577231Z","last_seen":"2026-10-07T18:59:45.921816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convexfinance.net/convexfav.ico","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convexfinance.net/","date":"2026-10-07T18:59:16.738Z","timestamp":1791399556738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convexfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 16:05:36 GMT","end":"Tue, 10 Nov 2026 17:05:33 GMT"},"fingerprint":{"sha1":"6E:AC:40:53:41:A4:11:DD:C5:39:0F:AC:4B:80:D2:CC:4A:E6:6C:F6","sha256":"2D:C4:7E:5B:28:0C:01:BB:63:C1:47:3D:75:F5:A8:C8:4E:C5:C1:51:86:78:68:8C:C2:51:CC:A5:92:F4:B2:7E"}}},"request":{"raw":"GET /convexfav.ico HTTP/1.1\r\nHost: convexfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://convexfinance.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F24tFEphux7WspuOELBwPXv3RRJ7C2pTIutO4%2B18xJ1VWlFyPyp2KewZGZ9IiZYwEmQBHczVA%2B9sfUUuKxwhkRe1fLr7jFospynltvVT7D1WodEjalBkEDjAPEWRq1bWioob5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1767be998cd8ad2c4145618cfaee993b\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 07 Oct 2026 18:59:16 GMT\r\ncf-ray: a46f245dad10dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5044,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"804b3cb5620ed0a1f9d064687faa08ef","sha1":"cbfc2c4fcbac514afc809a9dbae054453a01c681","sha256":"dde9a63201ac1a31e0d33d816e2c70e1907e9eafb163d256e65af10925ee4495","sha512":"0398687339e7488bc5bc43b38c621b1b6103b1abdd1484b507860a0c3f716b5edc323d300f9164aed00412938c8814f84e2a2cd1a9d2d7dc7c74ba0fe648d825","ssdeep":"96:jJkh6AoLwwY7htG53R9bqXAYgdslcnA9Yz1YRcWNk1cFg3QGSJgarP4CNe/:j6sAmoXGdqXAX/qGEcWNMMg3QRz4CE","tlshash":"a562fab91e74dc02d424767457a68da5e47e6d70cd9cfb3792163e331a33385624a0c6","first_seen":"2026-10-07T18:58:05.579267Z","last_seen":"2026-10-07T18:59:45.923275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"convexfinance.net/convexfav.ico","fqdn":"convexfinance.net","domain":"convexfinance.net","tld":"net"},"ip":{"addr":"104.21.65.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://convexfinance.net/","date":"2026-10-07T18:59:16.741Z","timestamp":1791399556741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"convexfinance.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 16:05:36 GMT","end":"Tue, 10 Nov 2026 17:05:33 GMT"},"fingerprint":{"sha1":"6E:AC:40:53:41:A4:11:DD:C5:39:0F:AC:4B:80:D2:CC:4A:E6:6C:F6","sha256":"2D:C4:7E:5B:28:0C:01:BB:63:C1:47:3D:75:F5:A8:C8:4E:C5:C1:51:86:78:68:8C:C2:51:CC:A5:92:F4:B2:7E"}}},"request":{"raw":"GET /convexfav.ico HTTP/1.1\r\nHost: convexfinance.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://convexfinance.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F24tFEphux7WspuOELBwPXv3RRJ7C2pTIutO4%2B18xJ1VWlFyPyp2KewZGZ9IiZYwEmQBHczVA%2B9sfUUuKxwhkRe1fLr7jFospynltvVT7D1WodEjalBkEDjAPEWRq1bWioob5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1767be998cd8ad2c4145618cfaee993b\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 07 Oct 2026 18:59:16 GMT\r\ncf-ray: a46f245dad1bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5044,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"804b3cb5620ed0a1f9d064687faa08ef","sha1":"cbfc2c4fcbac514afc809a9dbae054453a01c681","sha256":"dde9a63201ac1a31e0d33d816e2c70e1907e9eafb163d256e65af10925ee4495","sha512":"0398687339e7488bc5bc43b38c621b1b6103b1abdd1484b507860a0c3f716b5edc323d300f9164aed00412938c8814f84e2a2cd1a9d2d7dc7c74ba0fe648d825","ssdeep":"96:jJkh6AoLwwY7htG53R9bqXAYgdslcnA9Yz1YRcWNk1cFg3QGSJgarP4CNe/:j6sAmoXGdqXAX/qGEcWNMMg3QRz4CE","tlshash":"a562fab91e74dc02d424767457a68da5e47e6d70cd9cfb3792163e331a33385624a0c6","first_seen":"2026-10-07T18:58:05.579267Z","last_seen":"2026-10-07T18:59:45.923275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"convexfinance.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}