{"report_id":"e28e3ee7-9dc5-467d-a9c5-2a1e777cd0a8","version":0,"status":"done","tags":[],"date":"2026-07-12T22:18:02Z","url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"172.67.164.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"title":"Wefi Gold | Crypto Mining, Smart Trading \u0026 Digital Coin Ecosystem","dom":{"size":262380,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16651)","md5":"eeca7f3c7a11cc75ee1e8daaea89d517","sha1":"70d0946304908c51210ed18b4b34bbdfdf5fa530","sha256":"1a137914405f3197796783aefbf94c519e4c81fe51b7a5170ce2a84c078528f4","sha512":"edff668346302f7499af49f6eb21cd77874bb06db46cc4123c88f8b0435e94631935845ac26cc0c843fab8a7ffd2b834dc500a71f9269d1f3683d9fd7be049ca","ssdeep":"1536:NLEHrf46jDxAZcCCr2jfV3h3mx+91b2uayq5ayq5ayqlettteHtttefttteszvXR:NmvjDwc+3I+Nj+ne","tlshash":"0a4419a092d029f7f4028bddc8d7fe5b22eb78eb8fc68425d561153302962981f7bc65","dom_hash":"domhash82252f1bd5f8b7b06c2269b8cd8ed9c2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"172.67.164.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:18:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"api.wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-07-10T07:56:54.376711Z","alert_count":0,"request_count":5,"received_data":84639,"sent_data":2350,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"stream.binance.com","ip":{"addr":"52.69.137.139","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2026-07-04T09:57:08.21447Z","alert_count":0,"request_count":2,"received_data":480,"sent_data":1376,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-07-06T01:14:43.051705Z","alert_count":0,"request_count":10,"received_data":155770,"sent_data":5529,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-07-07T14:03:42.930919Z","alert_count":0,"request_count":1,"received_data":9218,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"media1.giphy.com","ip":{"addr":"199.232.173.32","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"domain_registered":"2012-11-27","domain_rank":7125,"first_seen":"2013-08-04T04:24:55Z","last_seen":"2026-07-12T09:57:29.13415Z","alert_count":0,"request_count":1,"received_data":2083617,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.wefigold.com","ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-12T22:18:06.47022Z","last_seen":"2026-07-12T22:18:06.47022Z","alert_count":2,"request_count":2,"received_data":1887,"sent_data":1089,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-05T23:52:25.141715Z","alert_count":0,"request_count":1,"received_data":88786,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":1,"received_data":57490,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-07-06T09:55:05.102275Z","alert_count":0,"request_count":1,"received_data":81631,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":4,"received_data":489670,"sent_data":1872,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":5476,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wefigold.com","ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-10T10:31:09.864524Z","last_seen":"2026-07-10T10:31:09.864524Z","alert_count":41,"request_count":41,"received_data":4540899,"sent_data":19308,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wefigold.com/lib/easing/easing.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d64116a742887080b3a0abd09e0bdad7","sha1":"8cd4375fc3c60237ea3994209d17a57ccbe6b0c6","sha256":"901eb80cc3f8c274fe6711bd023884258839610c9274082a4881f71e2206b4fb","sha512":"d2a0568b71a2ae4a01db28c02903d35c72e9a1090814e7a8dbe9325d45450ef7f75c29e9a1f0c6f9bfa6843f143817d9e4ae3c25e0e7f814b22ff476f8767783","ssdeep":"","tlshash":"4b4107d9f9c3b75a934275e0162f200bb22e6eb000ed2530c66174aa7d3831d9d3bacd","size":2303,"data":"","first_seen":"2023-03-07T12:05:14Z","last_seen":"2026-07-13T06:33:37.406565Z","times_seen":2111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-13T13:26:43.631554Z","times_seen":24896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/vendors/particles.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27aebd73f9420a886672c85d041d6c37","sha1":"079b6e3e63796ea7b8a4c992d606321c522eaa3d","sha256":"76b9e93e480a0f28f94b174db029a11d11174505bece89eb30ff39c642f5b8be","sha512":"79c4db6f1f7f150581054fb86612feb8c79fea8861baf23db881d6e9f1331ba9c48b3d801b6916ed27965123819f493ad4396aa644677176a9b296fe5d9e97a8","ssdeep":"384:MxfV9LiuqbRv3GZa42tK3nrEJ5NJuj+BJIH5n8CMTI7Iyebyieaw:Ed9L8vn03rEXNsQuHdMT1yebyieaw","tlshash":"a8c2530d63f62d7333c772b48edfc213a77044d71a8b06f5f568416ce6a8986525a3e4","size":27654,"data":"","first_seen":"2025-09-22T10:46:15.856249Z","last_seen":"2026-07-12T22:18:10.082646Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/config-particles.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"054591ae53fbdead7c6b5b20e44fedc5","sha1":"f59f112d8c9450b631a8624a95331ddb826286bc","sha256":"649b167600a5d5ab18bfa5e65a3c4536f760adc4ba076267145ce7c103424125","sha512":"141dca9b71612f2c1dc9ca81e53122ddeae715345dee68d3bee69b3b1e1c6602ce4f482012e87181c951a00a41407d24f83053f08635dfe62545d6af2d844a3e","ssdeep":"","tlshash":"b141282dd9b41cb3004ab03508be9247b570c6570d2a3d35bd4c819c5f0ee6d65be7e1","size":2216,"data":"","first_seen":"2025-06-12T06:47:54.561553Z","last_seen":"2026-07-12T22:18:10.075675Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/utilities.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b95253adcd343a80eaa96b8f57de0c23","sha1":"43ae118894bbbf75e74cca69f17d4b7bd5aeebc9","sha256":"9a05710bb08c351a80c1d2e4e84db6c39e084a5f6eda3d2577b3d273adf218dc","sha512":"10f52cc7b6a547830c0e9f3e01ff6ea732131703a8cfb44701b884e0fa7b069c043a959be2fd110aa1e6883403f6ae819c8c9c02824d25ccfba54e796a709c9f","ssdeep":"768:ecCd1AtLF9G6ygIz8m0fCqvGWE4GG86Eepp5gk:PIz8m0f8Lk","tlshash":"48d2c96870da6032899f42af24bf178db6b1201a9845c499787ecdcc1bb4d4d92e7f7c","size":30223,"data":"","first_seen":"2025-09-22T10:46:15.845781Z","last_seen":"2026-07-12T22:18:10.067212Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/static/js/main.4d4bf47e.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"454bc9475c6095133018ca86097a2604","sha1":"85cb01939e833a2f1396facab1589f7bdca3fc11","sha256":"b88c1ad9a3c983fada2c69a786458dfa191c144a6c17662857559a2b89ff34b0","sha512":"aa9b74e07cdff2e15b84d1cbbf6dd8e5a01e242d02baeb692ff33a8fb2a555a76341f0a99813218f7c844552d323d617b04abd9b276312bf2eda33b299aa910c","ssdeep":"49152:93nk34ZlxuJtSwNf4RwLEK+1xTSu1gxhVd9UQb9w+Tdv34JRGh:4JtCSuQLTV","tlshash":"67956d99f255b466967705d9807f000fb33a3e48a80d4860f57ad8ea3968dc9723bf7c","size":1921304,"data":"","first_seen":"2026-07-12T22:18:10.097507Z","last_seen":"2026-07-12T22:18:10.097507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-13T13:05:52.483419Z","times_seen":136414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.bundle.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5334e475209f965b4862f3bedf32618","sha1":"fac45259046dd90b16d251739108002d67a00b54","sha256":"394156ee114ed3faf968419340ecfd17f69740eb7e4f0a88d59e1f6d5bf0c34e","sha512":"738c1384f3c2326bb8c6c56e7c91e8928800f57e246b9f1ccbd70461fe6dd78ef04b0d19a38ddfc1d4f2fc80b4935a0bc5771494fbd664c9c3f1b7bad6cc16ee","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5","tlshash":"0473d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","size":80698,"data":"","first_seen":"2023-03-07T01:07:09Z","last_seen":"2026-07-13T05:39:00.902152Z","times_seen":2571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/owlcarousel/owl.carousel.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-13T11:40:15.519532Z","times_seen":19780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/isotope/isotope.pkgd.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"035a94b2b3f2103ab665f2885f953836","sha1":"3cb37f0004158f3e8f9194ebdb1d361dce6f0ed0","sha256":"2ac1dec2ea676653dc33c1dc718636434357b352fd07d6bf9750c69250191abc","sha512":"a53c8bb76b4a444bd288d60cdb515159142d8ceb7f85935823e051431f720ce6ef708c9d27edc3b3f0f100a4ffbcaec3ede91215fa6e6d887b7248adcb6f0c29","ssdeep":"768:9fyxzGdHc1zfA9ZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz291Fxt:Ux6dOjARP4Nnmc6FuCshD6cD6xS9ODzW","tlshash":"4df2d74f73403924468bf166966f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35503,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-07-13T11:52:04.6097Z","times_seen":5774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ab246d4c3688e2a426fb2c03e7145a1","sha1":"75bdeeeb2162353868066c8b32c32a457324828f","sha256":"9509ef8863a15ec135bb7431ee0424c4dcb6677c383c33ccf5225f3d33b61494","sha512":"f015f86e9c0c2070e1e0e295daeb3172f14fa0bd4c4b019accdecbb2454d2a45349f65f74e1b44fe05eeca0c9b6a282e65457b5b0eff7527309c2f7f0c5ece7c","ssdeep":"","tlshash":"93c0c050661135200353fe3e313cd340093521d611c78c3600940c84ccde27c06f797d","size":175,"data":"","first_seen":"2026-07-12T22:18:10.09896Z","last_seen":"2026-07-12T22:18:10.09896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80aa1139816df0cf592e36ae219e1ac4","sha1":"ae788ebe6ca8303d39b77b8754e5be6dc34f0904","sha256":"f334bb6ec12633b5f0aa11f35174d4f6fec035f71260a1d77b617834b0dc8f1b","sha512":"f554c4cfd42cfe3f564cc6d75e50d19e6fc635fa5809729db726fef5e680eba662c8d27aa12e674d1a280a652f1377e112bb48944ecdc9037a6cbf83e16b4dab","ssdeep":"","tlshash":"0db012533880a075849e0a6502870ab4381818865c91402078d8c0a40920ea141256f8","size":87,"data":"","first_seen":"2026-07-12T22:18:10.100057Z","last_seen":"2026-07-12T22:18:10.100057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T13:20:54.551999Z","times_seen":29055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/vendors/tradingview-widget.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d5ba9db2d09ddaadcf0bcb79a18840e","sha1":"8fd0d0b3249ce5865cbd23baad7100294c69f72d","sha256":"4eec74a8226ee9ae8ae7b2f3ed47ab3ffc27036d14e883b14e18c05f459d4815","sha512":"26b4d18199d07579a5c8f7fc363bd311ed54526cfe1971d6f63dc1741724a54047a84d926ab8bf9ac9f3c84c162469f5da82ea017ec1e0429c5b8ed93076641e","ssdeep":"96:x6z91qP+58F9G66NILBecjxszor5/Uw+0VhgeaSS9OIVz2iua/:x6x1yF9G66gQls5/J6eCOIwa/","tlshash":"65b1836af915fdb497c9402f102f5b16b2c132d380b45848b68ef0ae177ada44b63b28","size":5486,"data":"","first_seen":"2025-08-14T22:30:55.012511Z","last_seen":"2026-07-12T22:18:10.072395Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/waypoints/waypoints.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9028,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-13T13:23:42.45235Z","times_seen":17535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/js/lightbox.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"754f3b83f87764db45e3adafea8c5720","sha1":"25f3a6e4c9beffea79679814072a96abf4207ba8","sha256":"0e21c9ee16ef31e8ec3323fbe9ba5559a71be47487436b1096b255f27eca12f0","sha512":"9d4517c840bfc5ee8145297a7933cc69712ba79c1da1fb481a0ac2051779d4c9b0327f4f9cdf97daeb1325beec1a986c5ed293df7e715806dc71a968a6072334","ssdeep":"192:0OkcrcdKIevYgCTQJcfvC2LL4FZRrlamRrbxe:pXGP+8QWeacs","tlshash":"24127249fa24203ae6af40d6310b9f1a13372636be039a6c707cc6e859f9d445977f38","size":9418,"data":"","first_seen":"2023-03-07T01:11:50Z","last_seen":"2026-07-13T13:15:15.890518Z","times_seen":1271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/config-theme.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a1dcab6dc66b149d1a37a460ad2991","sha1":"cfcaf14a16080da4d4c84d544dfac08a3508fc59","sha256":"877105101a687c83a88a7527f74bc3da0d909f2a1e07dcb6919b7eb3dae2cef2","sha512":"3d6553e7f1fd815672e0c15b2276887176be460552a61ae30ad5e9f191841c4d2e4e44219303d17e6e47a5f8a6cd20dab28cf05ec327b06e2e4e611df020ea39","ssdeep":"","tlshash":"346132464d1451376572e2ba635b5141fb9226d7a381c46a7dfe00800f364fc159efde","size":3410,"data":"","first_seen":"2026-07-12T22:18:10.056656Z","last_seen":"2026-07-12T22:18:10.056656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj36 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1581195},{"level":"log","text":"/","filename":"https://wefigold.com/js/config-theme.js","line_number":46,"column_number":13},{"level":"log","text":"okkkk","filename":"https://wefigold.com/js/config-theme.js","line_number":65,"column_number":15},{"level":"log","text":"Connecting to:wss://stream.binance.com:9443/stream?streams=btcusdt@trade/btcusdt@kline_1m/ethusdt@trade/ethusdt@kline_1m/bnbusdt@trade/bnbusdt@kline_1m","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1574421},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj37 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1581195},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj40 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1581195},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj41 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj42 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] message:map[configurable:true enumerable:true value: successfully writable:true] success:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1581346},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj43 class:Array extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1581195},{"level":"log","text":"✅ WebSocket Connected","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1574518},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63797.14 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63797.14 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:5.63734 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj55 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:574.13 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:574.1 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:13.131 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj56 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63796 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63796 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:5.739 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj57 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.67 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.59 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:103.3868 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63790 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63790 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:5.89035 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj59 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.52 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.52 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:104.2114 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj60 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:574.1 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:574.09 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:13.204 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj61 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63782.01 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63782.01 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:6.25285 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj62 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.2 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.2 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:104.9363 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj63 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:574.04 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:574.04 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:13.838 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj72 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63782.01 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63782 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:6.26116 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj73 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.2 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.2 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:106.4854 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj74 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:574.04 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:574.04 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:14.09 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj83 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63776.77 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63776.77 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:7.20944 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj84 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.19 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.19 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:106.5149 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj85 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:574.03 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:574.03 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:14.156 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj86 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63776.77 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63776.77 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:7.26415 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj87 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1803.2 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1803.19 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:107.4037 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj96 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63766.01 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63766.01 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:8.75166 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj97 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1802.82 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1802.82 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:111.3104 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj98 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:573.95 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:573.95 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:30.272 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj99 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63735.01 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63735 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:13.91417 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj100 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1801.56 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1801.56 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:132.6746 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:573.83 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:573.83 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:39.439 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj102 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63734 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63734 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:13.97813 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1801.51 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1801.51 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:133.3438 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj104 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:573.82 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:573.82 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:39.715 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63730.67 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63730.67 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:14.04958 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1801.5 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1801.5 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:133.3569 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:573.83 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:573.82 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:40.154 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for btcusdt:map[actor:server1.conn0.watcher14.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:63730.64 writable:true] high:map[configurable:true enumerable:true value:63810.37 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:63730.63 writable:true] open:map[configurable:true enumerable:true value:63810.36 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:14.3249 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for ethusdt:map[actor:server1.conn0.watcher14.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:1801.44 writable:true] high:map[configurable:true enumerable:true value:1804.28 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:1801.44 writable:true] open:map[configurable:true enumerable:true value:1804.25 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:133.5956 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179},{"level":"log","text":"📊 New candle for bnbusdt:map[actor:server1.conn0.watcher14.process7//obj110 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[close:map[configurable:true enumerable:true value:573.82 writable:true] high:map[configurable:true enumerable:true value:574.24 writable:true] isFinal:map[configurable:true enumerable:true value:false writable:true] low:map[configurable:true enumerable:true value:573.82 writable:true] open:map[configurable:true enumerable:true value:574.24 writable:true] time:map[configurable:true enumerable:true value:1.78389462e+09 writable:true] volume:map[configurable:true enumerable:true value:40.165 writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://wefigold.com/static/js/main.4d4bf47e.js","line_number":2,"column_number":1575179}]},"http":[{"url":{"schema":"https","addr":"wefigold.com/img/vc2.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:36.679Z","timestamp":1783894656679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vc2.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:19:50 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2c6-2bf96\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hk3NBwdAn1eQhMwsXwRu1yTSKOnkhd%2Bjkcd%2Fq7Glp8E94BEOwCC1%2Bc%2FYUZ7HN3Za%2BMgR1ydxM6vwhpQ8Zr0dVKwphOsUaV8jWCr7RfcLRKCic3mFtu7tftFHGa%2BQjjM%3D\"}]}\r\ncf-ray: a1a36b444878569d-OSL\r\ncontent-length: 180118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180118,"size_decoded":180911,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27d666bce30149049ea338e81ad3ae6","sha1":"d731dec40164845215588a70c812f51673a62949","sha256":"301072a02665e7eaf2eba3fda322702865d6859e8508b5013ff843d718210c7b","sha512":"cf3324375d0085c28ff54639ebc0c948c807d40cc05d481523da8a8a4e0e0b8bacdf543417976f0b01d16eb22bfbf1c0ed486e05e6a551c120c9402b4926402f","ssdeep":"3072:2JJKvIyy7ePH7CSqvKCfGyNAHSWUJfJxylko71xQBLVyYFB0NKXXYK+Sho12gA+i:xXPuqC+yNAy7fSkm1xukUBUMaSii","tlshash":"ad0412169c2ec721cf3e9c38ddc25eb14e629c50ca30aaa33bf1756d2e83524d18d55e","first_seen":"2026-07-12T22:18:10.046846Z","last_seen":"2026-07-12T22:18:10.046846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1m\u0026limit=100","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:34.508Z","timestamp":1783894654508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1m\u0026limit=100 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 3971\r\ndate: Sun, 12 Jul 2026 22:17:34 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 7abec937-f5da-4756-a35b-d1b25d1ff8fc\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: IqDVdfxRhI7Fe1_mp3vq9Jlety8nrLOs9ZgRVnfQgBPoLJPE-VfMOA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":15750,"size_decoded":4893,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"19e322ac63ca4095b98f040fb4d9e056","sha1":"3aa9494a6084f4a2f94d6ad534a542c36c67151c","sha256":"ecf9a8ab48e90b519c3eece83cbb398d34c278c7a6f93e30d3e3ed04988dd24d","sha512":"cb2179c1eb8e8100defa6b42d12d52b927e248a2a53a5067415d95d47c0757329e44e57d20cd278dc91522cc579041f1138494ecb81cffcda0a1ebca6c63ef03","ssdeep":"192:Qd1d8mCXfE/OjtFbv1exJms0Xu60m2x9AEEpEylvQ9kqln3lGQDE4T:Q34EGnj1w6u60m2nAEmEypQ9DgQDZ","tlshash":"e3625c571b98c6a4fa358c1d3791f8dfa96a3367acda0dc495d12b235af10bb1e08730","first_seen":"2026-07-12T22:18:10.047924Z","last_seen":"2026-07-12T22:18:10.047924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.868Z","timestamp":1783894652868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.10.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 23077\r\nexpires: Fri, 02 Jul 2027 22:17:32 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0kr7v59frlwCRiir2L1DGgUA%2FEfgqHSZvEDyba47QmzXrpCk2cOd5OtJdFpk%2BB3FU9aQfoLjULMa4LBdOmkN3i6ykjnjJ7G1AO49sCk2kdObnoJ8j8IJhROiJKte7CcDzKKduv%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a1a36b2c8872b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56517,"size_decoded":10947,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (56331)","md5":"25a0ac5d7d8e48930fe0b6772b7254a8","sha1":"6f4095f66e56d39ef0adefbe85a1dcfc13bd133b","sha256":"a94a13d4e9df8dc2bc696a168930cd511f83498136bba3bb0b968d7556f0b807","sha512":"3e040c96afa7a852d5e32964d60c143a09ba0ad2085e42b06881e9fcf008587ce283f94a652106284cac8744c255b1c95c22cded67ad0fc4c579c224cbbe597d","ssdeep":"768:WEC31sPizPq4/vBUAUHJvkQCg/xMQyjJrX759sGZQz5:WETPUC4/pMHBBC8gd7nsDF","tlshash":"f0430cb8e54c01c9a731c44fbf82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T14:05:26Z","last_seen":"2026-07-13T06:33:37.45193Z","times_seen":2714,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/earn.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.880Z","timestamp":1783894652880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/earn.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Mar 2025 08:16:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c6b6c2-84f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTkmcRMGYGYJBu%2Fs5ENO5W78UfAbq8lguGQskgStCy4Cp46ra8TVBXRi0MszH%2B2Ajtzsdyolj%2Bk9GPZf5yJK%2FCIyHVS%2B9JJGZgu7cLa3vGV3KYZKnLzCScI9UJreQBk%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c8f41569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127,"size_decoded":1397,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4994ecd4aec2a48dcc8996954f0416e7","sha1":"8a3d20b08687942a0a41d6aa2fff8095d93130d6","sha256":"aec3bebd221d3bdf462a0e0789989ccc85a92e272fa9e752007feac4fd34e585","sha512":"14aca0f8ac8873700f64c1ddd9e35c143530f827138c4dd633847b3937b915bd2b45cf584c5e5fd9c82edca0d7ae1483165be41310d554a7816cf9cb3126d88a","ssdeep":"","tlshash":"b341aca9d37ba302423bd5506f636e38ef6542ab850d833d7da491646bb208ce714d8a","first_seen":"2026-07-12T22:18:10.049332Z","last_seen":"2026-07-12T22:18:10.049332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/js/lightbox.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.911Z","timestamp":1783894652911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/js/lightbox.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-24ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSd4tTGiAnniJ%2BTtialHX6eM7WF9p3N7RBotlB2Xr3EP5L%2BGMiy9JKOiZtWUlbkSbuMioRKdtJFHcZ7fnpMuVus5gKmznycAKtrnayJN44dipvHI0saFh8JNadC94B0%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2cbf4c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9418,"size_decoded":3484,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9118)","md5":"754f3b83f87764db45e3adafea8c5720","sha1":"25f3a6e4c9beffea79679814072a96abf4207ba8","sha256":"0e21c9ee16ef31e8ec3323fbe9ba5559a71be47487436b1096b255f27eca12f0","sha512":"9d4517c840bfc5ee8145297a7933cc69712ba79c1da1fb481a0ac2051779d4c9b0327f4f9cdf97daeb1325beec1a986c5ed293df7e715806dc71a968a6072334","ssdeep":"192:0OkcrcdKIevYgCTQJcfvC2LL4FZRrlamRrbxe:pXGP+8QWeacs","tlshash":"24127249fa24203ae6af40d6310b9f1a13372636be039a6c707cc6e859f9d445977f38","first_seen":"2023-03-07T01:11:50Z","last_seen":"2026-07-13T13:15:15.890518Z","times_seen":1271,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://stream.binance.com:9443/stream?streams=btcusdt@trade/btcusdt@kline_1m/ethusdt@trade/ethusdt@kline_1m/bnbusdt@trade/bnbusdt@kline_1m","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"52.69.137.139","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.736Z","timestamp":1783894653736,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /stream?streams=btcusdt@trade/btcusdt@kline_1m/ethusdt@trade/ethusdt@kline_1m/bnbusdt@trade/bnbusdt@kline_1m HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wefigold.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3Ny5INTYM6Z8k04L5APDpQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 22:17:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Sj1/cyyRWcnt71V9JbWncAWWiTc=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":240,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T13:17:51.40421Z","times_seen":17213533,"resource_available":true,"data":null}},"time_used":2884,"timings":{"blocked":-1,"dns":1053,"connect":1307,"send":0,"wait":261,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/4128/large/solana.png?1718769756","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.952Z","timestamp":1783894653952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/4128/large/solana.png?1718769756 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: SZCDcqyNUr6Ab1lRaImlusTgwybivwPi3FDAMEI0EiIG7cbZmCBQ975K5dVuiviXB1lxCXHbV54Erd/n3WnRveVTvhJ20ESL\r\nx-amz-request-id: FEHW65CC73TYGDGR\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"c77657e6bcd28104bcacc56b7d5c0cb0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IjyuRv4vQPFqEiqEjW0r8gug6.5RQ8SI\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 5950\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBdoYG4AIDN4QC%2FMCnHBvOmza4Xd7cthpNTn4YJxv%2BHXvNQZwfXUii2jCrvOcwjo%2F%2BEu03kSkSYxo2c4181HXmHlhUyTR0SvyqYqfjbCatDNJnM2uj0KBwUwXBpsU3LCL7ZcVSKA3DzGchjG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ec31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21309\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21309,"size_decoded":22280,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"c77657e6bcd28104bcacc56b7d5c0cb0","sha1":"1c9b57fccdfdcd054800c3759598b4a106307b60","sha256":"78ee4d656f4f152a90d733f4eaaa4e1685e25bc654087acdb62bfe494d668976","sha512":"69ced65e4e3aca2ede5e4379cd4e4052d9e12d94871b4071b12a5f35e1b6e746ede959af5895138a3441ae54d056ed601e9585bcae242f92532d0d9454ac857b","ssdeep":"384:BywR9TdNJ0PLEjkZQYhG3Tz5jybRqCrMcESYyToXZICrittpDp7w:zLdNWhh0TNjylqCrMczDTmI7w","tlshash":"62a2e1e1f9411128804cb0bc6297dfc4ed6e6b4b4eda5a6589cef6d87f201411a0cf9c","first_seen":"2024-07-10T18:48:43Z","last_seen":"2026-07-13T06:36:37.590027Z","times_seen":511,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/50882/large/hyperliquid.jpg?1729431300","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.962Z","timestamp":1783894653962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/50882/large/hyperliquid.jpg?1729431300 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: za6pFtDNOtifzgHNkk/XxTnXTA2xUnlYwOtZQYfgYuiGxr1vT5X9IgqotQHEWn+a50W0dfW9KYE=\r\nx-amz-request-id: CVHXVMMFWN2FY9TN\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Sun, 20 Oct 2024 13:35:02 GMT\r\netag: \"0dc4d6a9548abfe5aa4f6b5fda15d85e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: qot_vrFv5Bu8OJRbNdaqel3zUpzTFnOh\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 805\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIYDhmCaSvFREVzYg6xeKth0qwmuF4vghBcrAcFApMy8DkViGdl6ZVTiTCmPTYrBKcmSzfFcj0wiJM7mhCl%2Fd389gtWFIEWDPoa2fLv8O%2BKe5cF9VbqxSLuNzWti2Hh6cx60o1zdJj0YI%2B3W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ec21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8255,"size_decoded":9203,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"0dc4d6a9548abfe5aa4f6b5fda15d85e","sha1":"6b47f466167ca4f96dc5c59502446b08f0edfdc4","sha256":"83dc5d30805ef25dab066f2ee2f37b98e8d965a98ed6801aae67e344961f4387","sha512":"29619357ed951cce30a9608292728e485bab057efe784559f03abc9f259faa039b318b32244a8a8ed43a6d4324d78cbcadb3310c5a9477aa5c7d8d9731acd473","ssdeep":"96:IElbw+iqBQWdauehd994RhXpOmG7iatF4klEVnR2/sCGIVSBz+hRyFBeWFWAsxrb:9wFXuehdX4v4mG7sVSGUS8RyFBFTCA2p","tlshash":"8a02af54fd856a0ce7422fb80c236bc6d560763188f2fe7974a419ee799d1cf0e85782","first_seen":"2025-04-01T12:02:22.570639Z","last_seen":"2026-07-12T22:18:10.051963Z","times_seen":197,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/static/css/main.294c36d5.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.894Z","timestamp":1783894652894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /static/css/main.294c36d5.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Jul 2026 12:33:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a523816-dbd07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mI9EGS1e205y5UtW21inGnb7PXzRwDkXS6zCioCK8JhF5NzNpBNFR46AsIglO0jWhHBD3q2fabyau2GoTxAAQEH%2Bm1AQ9yCx1z8Ry7EvNSEcl42xLWbfVKVFDUb3i90%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c9f47569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":900359,"size_decoded":116259,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37095)","md5":"3f4bf2a4bcdf4b338526f37ff5513de1","sha1":"429525941f90614010a2d55f03d1522ac61f6155","sha256":"d04d4505c78468fd0fb2e933d51c7f41b590a8de40d7cb05f99473ed06f7ecd7","sha512":"7f1e406789bc3ed1b2a7b2c2c4c2d51cbca595114e5154809ca2ba81938b94038f6669309a51c3ae2f3fed29e4bb05a5d5194ba89fb27644f765eaf4a183b527","ssdeep":"6144:CovHo9ARRv1iIqyuuHzzaHjJzsDNndhLcCK8xUg/XTYsKnR9QflBfiz+Epje60Is:CSzTx/DYEfiz+vnZoP6","tlshash":"3415e858fb80306ee5e7c73b6490fe7859369602d66f4a6ef1b33b184b856c90163f09","first_seen":"2026-07-12T22:18:10.052463Z","last_seen":"2026-07-12T22:18:10.052463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/owlcarousel/owl.carousel.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.906Z","timestamp":1783894652906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/owlcarousel/owl.carousel.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Feb 2017 22:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"58b5f5f8-a70e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVwgGaXywUSHopgw%2BzPtdxEGlRkHoOQAGS9qLv0YvhCm9jdbcpScyhD08QDrOY1N9W1wNnZun2t1gKSe%2B0cKqE1TSnKZ9SPqHjM3bp0nHm0SRx68neJeR5mmJxgfNW4%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2cbf4a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42766,"size_decoded":11239,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-13T11:40:15.519532Z","times_seen":19780,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1m\u0026limit=100","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.726Z","timestamp":1783894653726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1m\u0026limit=100 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 4756\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c1d2c4a0-cc83-4630-93fb-f35a614e87e0\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: CFNJYGo88iWzIKTAV4tbvafokiXb1J4cHT0rtijlWQAMVpRSjcK60w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16789,"size_decoded":5678,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a2960a46f9a10f698584787756bdac3e","sha1":"0adaca72fbf4d9723cda4869ea6c138c73e387ac","sha256":"bfb5f27353b36547c71c22ac7e86b53c4a7842d5d7cb9436da142ac5fcd99df6","sha512":"03cc755e58bf83659a0ec78b200e4fa5ca0ab94e7b5e44dc67d6336f0c647be14499c78751053dc362c521ff3043c75a37c03bfb1bcbf2ae952b2bf1a92fbde3","ssdeep":"192:jBQenQ3QPpXOE7mijHPz+8SLkq+CEjKmmacdjB6jvkvCrYg0a+aof+YLVcAc:zlXOIHPKFLk98dMj2meaQ+/Ac","tlshash":"f3724d910bb45ab0f939893d33d1f965693e361b9dcb0ec08de1253759e20bb2708b35","first_seen":"2026-07-12T22:18:10.054161Z","last_seen":"2026-07-12T22:18:10.054161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":243,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/large/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.946Z","timestamp":1783894653946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/279/large/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: AfuKWJd+EqcwweT0VgEm6+/c0BTGHR9A2laflJDnhk0QvXATj/+WqhfB5XSuG2MDc8uRZHMi04g=\r\nx-amz-request-id: 5ZK48BRCW41ZWPT6\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"af87366546180c799987073ac53f0733\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6vmhZ_PH5UG1O..xRx9fhSAwELb.H8zx\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9KDDEuitUHipwf59J5wWKrBt30vkApGiP2Zdr2XDJdj6U5E45PPB2eTuDx3OLN9eHuVhGza4pAUPJRzWUdnjxqGO62VdWXXsqH8A4%2BvSRCbFcjSXhtVqvWlTx%2B4jKIQonWaSUEKqc%2F7kRsY\"}]}\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=13114\r\nage: 3797\r\ncf-ray: a1a36b335ebc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9561,"size_decoded":10531,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-07-13T06:36:37.664785Z","times_seen":747,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/static/js/main.4d4bf47e.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.893Z","timestamp":1783894652893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /static/js/main.4d4bf47e.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 Jul 2026 12:33:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a523816-1d5118\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDbg4dvHB5aH0SzKTLkRRL%2BXXIqg27OySKXRz9varfqKOQzAt39cjYbLgSDegcHjTrXAZG4cq3g1ddsy5%2FGosLygcGmaRdmaU5EpdTNCekfP%2Faeiod1xNnGKc3%2FSH%2BI%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2c9f46569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1921304,"size_decoded":471429,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"850b80c9b71dd717d6070e277400e696","sha1":"b1138e9b925caddd70c6c79c36f5a7a759226470","sha256":"729407dac6b0c9c9f2f94e8fe9e4f36fc810636392a63d398a4a8e1e53ec3def","sha512":"fde96f1e1c4dd2e267cbe2f5b4ed085db53d3ba4514510a260c1399e558b6f886ff4d4cac5c4687d14faea0f4dfdbfd93a3bf891d302c115204c6f7990f7c090","ssdeep":"24576:93n7g34ZlxYDzLpzHWtLShfSwNf96RwLEKUbq:93nk34ZlxuJtSwNf4RwLEK+q","tlshash":"22255d8af255b4334aa302e9807f1507f3356e592c4d4854f669eceb3868d89727bf38","first_seen":"2026-07-12T22:18:10.055652Z","last_seen":"2026-07-12T22:18:10.055652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/config-theme.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.929Z","timestamp":1783894652929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/config-theme.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Apr 2025 05:32:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67ff40e8-d52\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZXhNzNzNO86WfXqyqtJISzU%2Fqrcwhky6dHzHGYAUBQigb5Oo4hrsjqjXLXXbATA0HXYcEIH6a2AQY8q0EFrNVamcqUONtxqt2D4xl%2FizpvGhZ6294WfHInCmNK1Ep0%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2cdf57569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3410,"size_decoded":1796,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"19a1dcab6dc66b149d1a37a460ad2991","sha1":"cfcaf14a16080da4d4c84d544dfac08a3508fc59","sha256":"877105101a687c83a88a7527f74bc3da0d909f2a1e07dcb6919b7eb3dae2cef2","sha512":"3d6553e7f1fd815672e0c15b2276887176be460552a61ae30ad5e9f191841c4d2e4e44219303d17e6e47a5f8a6cd20dab28cf05ec327b06e2e4e611df020ea39","ssdeep":"","tlshash":"346132464d1451376572e2ba635b5141fb9226d7a381c46a7dfe00800f364fc159efde","first_seen":"2026-07-12T22:18:10.056656Z","last_seen":"2026-07-12T22:18:10.056656Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/mail/jqBootstrapValidation.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.262Z","timestamp":1783894653262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /mail/jqBootstrapValidation.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaoZgYMCX0npMEsUX36aD%2Bk%2BH6cywpMwxEhANSWLDeAJ5bKNRGzfnR%2F9TSjqig8UttPEszsK6uLrI%2FXIgS%2FZ2IkdTqYpZkbDhcj%2B%2BzYs3RPJH%2BfoD6OdjXL7OnF4Z9Q%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2eef7a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":742,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/images/prev.png","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.805Z","timestamp":1783894653805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/images/prev.png HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wefigold.com/lib/lightbox/css/lightbox.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-550\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5i6WFzQhSr%2FBbAa7PAXjHokey9bSxw8cL80PngCqeh7pfKKAjBzIK9pk3lVVIwhZ%2B4hw2b4pLmFdQPAShtKxzqTcfsUnc8DrzVHpjR1O%2B82%2FgDtQvyJNuikeaqEdEc%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b324faa569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":2129,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"84b76dee6b27b795e89e3649078a11c2","sha1":"6640a3432f7ba7aea6129cdf7a5d3eabd47c295c","sha256":"7fd9273f20fdb1229c224341271a119020a5eee74ccf6b4605730917c864caf2","sha512":"f7128971cd4b6442ebac344cad93186e1fcc976470e2f5a4e758f3439c7b07421fb99a927450414b86b4bbfc0f2cc605b0e63c217057e094f9d866d9906960f5","ssdeep":"","tlshash":"b121f8b5a75040bddc73b70a4428be38ced1ba204dcdce0b42719c77a082c29d7f1082","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-13T13:29:20.833266Z","times_seen":20657,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/mail/jqBootstrapValidation.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.912Z","timestamp":1783894652912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /mail/jqBootstrapValidation.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmvyI4XOLyupZyHLTaenhVCTuOLX3QYfz2z85m0X4iLOliD7V4eChaYRvEspkYiux65NlMCXJFdB9tEhDDacbEdW5qi3%2B%2BE47R%2FiamI7n6uDCqOhFQUddnOyeX6nYu0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2ccf4d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":725,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/main.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.297Z","timestamp":1783894653297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXLDRtW5P%2FjBbf9W%2Bd1JEBjEPlqfWSGxeELGHDblDmuUio57d6gr5lbkQ3EMkBteQzYGpfRJ7%2F1y2028Ul7sfd%2FSzDlrcFsMOUh%2FajzVmWBI0pH3R42%2BaNjWs5n%2Bu9Y%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2f1f7d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":740,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd\u0026order=market_cap_desc\u0026per_page=10\u0026page=1","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.728Z","timestamp":1783894653728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 17:14:13 GMT","end":"Thu, 01 Oct 2026 18:14:10 GMT"},"fingerprint":{"sha1":"FD:68:29:08:59:93:ED:F1:73:C5:56:C8:B7:8C:EA:2D:F8:7E:E5:67","sha256":"28:11:40:A6:0A:FB:70:11:FF:CD:E4:7F:13:40:3F:0F:D5:5F:68:21:26:DF:61:5A:45:A5:EB:B3:33:B2:A9:0B"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd\u0026order=market_cap_desc\u0026per_page=10\u0026page=1 HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-data-source: 1.0\r\ntotal: 16172\r\nper-page: 10\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"7e029f8915ff7561b2c60bb4d5c87fe7\"\r\nx-request-id: 984c3c73-b984-4302-899c-f1245f9e7c9d\r\nx-runtime: 0.004490\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=600\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\ncf-ray: a1a36b31fff076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7984,"size_decoded":3496,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f037a3ef540e7374ce544c72405048a2","sha1":"27b7866f941c3e19db89b76ee76654b1301dfcde","sha256":"f37d011d0db7274e8cadabc5c19cf874e93569009a83ab2c39515c080e878f72","sha512":"8ca873a6c0e46921d361d5ea2807d62f5f6892a3cbb8d1f04fdbe16075c066e940eefd2037a5046a96976012065dd363abcf67a23a81cb10f0a79bf4d5271730","ssdeep":"96:BX0JlO/c60+gHIyebhwYFYz2VdOlQT2YcaS4Ia7vat7MeqSUtUzTzGC+1Y:5E6X3yCiKEFVaSpuPkrq2","tlshash":"31f105911d34d8e3c291765a699a3b204d2ebeca9cd9dc035fdacdcf04a4bda010ee5d","first_seen":"2026-07-12T22:18:10.058699Z","last_seen":"2026-07-12T22:18:10.058699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/825/large/bnb-icon2_2x.png?1696501970","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.949Z","timestamp":1783894653949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/825/large/bnb-icon2_2x.png?1696501970 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: ZfQqcFByutPtgyP4qrEYwNUnufoqtGQiws9Zb3pfTebuaoDwrN+ibM24nr/YVo2blg6dg6KxKA8=\r\nx-amz-request-id: 8GSR19MWWDQ7J5WH\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 03:02:57 GMT\r\netag: \"d2963b42f5b0f6cdcad306c98082cfbc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: GeU4bu9KKlgRS2f17Kc5LLYvQNcl.X40\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 51\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=800Z0xMV125V8zNrOjDw55c7jnsj5QYLWuePFy73LHaLhBvZs%2BIRbctyHMRI9BYDACRnN0EFu3FEQ6IqN9XMFFEIqfyYP9zoZv6R6DLdSwqivrKigHVDKfJ9nueyaJlZSmuLC4e3auAAASdr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ebd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21673,"size_decoded":22618,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d2963b42f5b0f6cdcad306c98082cfbc","sha1":"918ef4bf2083e0deb045febec8847c5b2811efe6","sha256":"72a5e32484f693a8a2d6f8310d364c4362911daf764603e955c79e17fffb33e0","sha512":"8ad332b591d291ac1e346f8b6c7e9d1fa3fce5d4f3436fd006e10c95c399bcfbb265fb28a452fd869ad25375d8b0bce535467d302a3953008336a047bb644c53","ssdeep":"384:igm58+U4mI5NsuKLdjjq6ZpqG6WS3bJ0pdZCqqhBnk/ZrateYC5XBTpiwL7oo:X+U4mIkuAjqCF60poBnUZraedpiSt","tlshash":"2da2e0c0bce0bb50573a5fa7ccfb992c57110f5b5aaa4e46bdb3c028e175d8391a2349","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-07-13T06:47:20.198042Z","times_seen":519,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vds/vcc1.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.601Z","timestamp":1783894653601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vds/vcc1.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:20:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2f8-28c16\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lARq0LvPfRlLPS7WRZRvZSA1tgRs%2BlNDVmCs5En%2F%2FAgv1sk2Lq1NxkfY2Y0uk1nXXEZlv3oSCNhBs9tWrLcfhQo%2BhZJs2PyMIisLWA6tFgqPlTZUd%2FgPnGCuymq9lbo%3D\"}]}\r\ncf-ray: a1a36b310f94569d-OSL\r\ncontent-length: 166934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166934,"size_decoded":167725,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb6ed186321b294363f9df44bba6c4c1","sha1":"cb210cce2020638b9b3a123ce700a27358009a0f","sha256":"16a52cc3037c6ca91c9df28253d9e4a897e3467b407b7812b8b652d4ac9ecc00","sha512":"713736c994aae9d4e6621cbead598eda71e5a1da0a44b732b141403e3cea192687b2d34e6e2701edf0333afe0176881526ad7d2c3fe578eb76b3cfcdac0bb619","ssdeep":"3072:MJJua727QMWe0/QlwYAabCDr/6VV4csTfplaSy7No+TVjPNrMrvu:17sx/Qmbr6McYfq7agl18G","tlshash":"f3f313385f46b6a1eca8aa3f5b84ed3507b3f72ccb637499ad91e321445414732c618f","first_seen":"2026-07-12T22:18:10.060464Z","last_seen":"2026-07-12T22:18:10.060464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media1.giphy.com/media/NhWZxXB1zoMapS1jtN/giphy.gif?cid=6c09b952gt7bwkudpg09xj2cm1vl41az8u9rrwmdxjdyhyz3\u0026ep=v1_gifs_search\u0026rid=giphy.gif\u0026ct=g","fqdn":"media1.giphy.com","domain":"giphy.com","tld":"com"},"ip":{"addr":"199.232.173.32","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.610Z","timestamp":1783894653610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.giphy.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 25 Apr 2026 23:03:15 GMT","end":"Tue, 10 Nov 2026 22:03:15 GMT"},"fingerprint":{"sha1":"51:A3:50:71:65:9E:30:C8:69:A9:F6:B8:5B:DA:DB:C7:83:70:7F:69","sha256":"FC:72:B0:4F:85:E4:C2:40:B3:DD:3C:C9:2C:DE:74:05:53:D2:EC:7F:60:6F:53:30:3E:5C:BE:9B:00:8E:58:38"}}},"request":{"raw":"GET /media/NhWZxXB1zoMapS1jtN/giphy.gif?cid=6c09b952gt7bwkudpg09xj2cm1vl41az8u9rrwmdxjdyhyz3\u0026ep=v1_gifs_search\u0026rid=giphy.gif\u0026ct=g HTTP/1.1\r\nHost: media1.giphy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 21 Mar 2025 14:11:46 GMT\r\netag: \"1a8eec18ef522f84d6f9c9554c618c1d\"\r\naccess-control-allow-origin: *\r\ncontent-type: image/gif\r\nx-fastly-origin: 1\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-served-by: cache-iad-kjyo7100128-IAD, cache-iad-kjyo7100128-IAD, cache-fra-etou8220073-FRA, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT, MISS\r\nx-cache-hits: 35, 76, 0\r\nx-timer: S1783894654.645643,VS0,VE21\r\nstrict-transport-security: max-age=15465600\r\ncache-control: max-age=604800\r\nx-robots-tag: noai, noimageai\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2082892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2082892,"size_decoded":2083617,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 298","md5":"3ad1ae6fe5e73dd18017af5776cb45f9","sha1":"c28d00dda9b9cd1457036668f25a0090a3c9990d","sha256":"9011a0369d4b80752d689660534f0e4f9cf09201f85286ee6a31b1c176f9b3ca","sha512":"83e3913823219c94a12c5aa7e492a83bc8c9677839daaa9d3239f09df98443086c61ed0ba92cbd49ccd6d6586f5f6007d9d194bc00944e12fe411dc6a99aa850","ssdeep":"24576:KZHaxjuiH96UtbqKk0Fp4blAHQ4Usk4NXPiO/zSoxMlAXuF:KWP5t2KN7QR6XPiO/zElV","tlshash":"f02533539eac0c913900fadb0f8e771e5e0d782e91456f40db1d4625f8b82af1e9f8a5","first_seen":"2025-09-21T03:28:58.559675Z","last_seen":"2026-07-12T22:18:10.061497Z","times_seen":7,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":30,"receive":67,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ADAUSDT\u0026interval=1m\u0026limit=100","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:34.755Z","timestamp":1783894654755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ADAUSDT\u0026interval=1m\u0026limit=100 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 3322\r\ndate: Sun, 12 Jul 2026 22:17:34 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 467e01b4-5905-4646-8d90-bbe607b1d245\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jCUt0IecQO_iNFIZgJIXyehgrYbyGzZ-7HxtrqC33-UjH15KQh23Lw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15237,"size_decoded":4244,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"afe8fdb9fba6ba52098b243a57b00582","sha1":"1871a341230d8d60f2993d4eb5846a9e8cee0d38","sha256":"0cbcd002bafae916bfa4069c1d7a158e7aa062a49d851a4f8d9880211fa9f230","sha512":"e7e38a8997b7b9b963d410d30b070e4077fda548eb1374a488ebe620dcf61055aeb48960053643a78392220271e749de0e2b5b7f55fee87c0d85ce0b8a62470f","ssdeep":"192:6S+CoK3x2KqihuefIHS42QnHbb3pkhBGee8SOYOOO2OUOFGyXJ5Gov2RyMs3UZOr:xhf3vqq3fIHSYbihHEw1b+/ol7on0Br","tlshash":"14621b911b903670f9768c197391f919ab7e306fadde8fd085d229270a96dbf160cf20","first_seen":"2026-07-12T22:18:10.062333Z","last_seen":"2026-07-12T22:18:10.062333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/assets.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.878Z","timestamp":1783894652878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/assets.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 12:26:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e543f8-9e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMP5LZIMa628e6q6mBtabSvu8TyzPrPogkD1qoE%2Bndm1BV8y%2FjQnaL11mORZsW7mJokraWq%2FvsALDFFAX0qP6or%2FNMKP3SgA8y3oaOnC3Ka4NsXhpbJpv6LnDQKRvlM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c8f40569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2528,"size_decoded":1474,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c61d4850bd045c9e083d4d8a8d2578cf","sha1":"039589740216a3278a584a1875d2379b6daf9d8f","sha256":"3caa0927462f636c56de378955f5e50bc28267be89f2e895d89a9bbc4db65e9d","sha512":"e36443602d16bf71c7188c803dd1b71ddf54f6bea08f54bf0fe7a93503a8b14a1ae975ee40ce67e1ece35ec11e696f8dd8d84f3736942b2d9782020ac0195e80","ssdeep":"","tlshash":"46518caa974b3002533b52f063624dacef74535f8a45c66c36b471207bb54e5cb21d6d","first_seen":"2026-07-12T22:18:10.063277Z","last_seen":"2026-07-12T22:18:10.063277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/waypoints/waypoints.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.904Z","timestamp":1783894652904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/waypoints/waypoints.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 08 Nov 2017 09:29:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a02ce8a-2344\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ5HgBCozui14Fo7IuO1sbifoHbCKftXl4PyRpRuuXy2Knb3B3n%2B2fzBAlHc%2FIHh89HQl4K3tTZpHPQvA8jaBBtXQPIu%2F8pe7R1EoWiP69aqJeqy716g7MXDuwBamwA%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2caf48569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9028,"size_decoded":3360,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-13T13:23:42.45235Z","times_seen":17535,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/large/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.944Z","timestamp":1783894653944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/1/large/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: acfy4yV0hNGDZyfoIOBuAcpZ830diCRSUHcw7R7Y15TMkuSwLz169JCJW401UG51dQimFeY3Pl8=\r\nx-amz-request-id: XJT10ZHWT65SDYTK\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K_Yd_oAsiQpaEoTt9rotaTCh6C_AUMdt\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=12242\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkII5blvRb2UQETRycWFZDDNHTl%2FnLn5pY8lM2iLcuNgLej3RADE%2F4418hEih%2FKXtuQ6A5jExSfdkKeayqDZjjYH61GBZIipAxcrRflv5wQSTMrBQCQ84HVC4acaEEbcSCc9uIM2CSek31y6\"}]}\r\npriority: u=4,i\r\ncf-bgj: imgq:85,h2pri\r\nage: 1019\r\ncf-ray: a1a36b335ebb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9454,"size_decoded":10461,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"66a88a80de5eed33ed8583255445b6c4","sha1":"6d934c7f34286a0344dfbfa63c9ae12b34b5812a","sha256":"39d2790e598859909bf6cb1ed16377e3b220f7e8f2152ca733f70f28abb969b5","sha512":"4c621d0562ae0ecf2be57889fdc0710f9a7baef55514ce3d32f990359e6d2366dbe2c0fe41ab800d5840ea33da5c2d5aaa0fe513274ab58111008e6779e6abf9","ssdeep":"192:dItEpiWFaNPITJaSaLLg+1bslrPN8dUWCspKo8GtRlUV1QQRwD:9GHlvgTpNbcKo8GtRlUVWZD","tlshash":"b412bf52bb7469abfd7223332a2f355f990619d60895b0405c6b8fb31dc3da9f11730a","first_seen":"2025-04-01T12:02:22.596262Z","last_seen":"2026-07-13T06:36:37.52639Z","times_seen":464,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":15,"connect":12,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/large/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.951Z","timestamp":1783894653951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/44/large/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: LhtraOG7O4UusfqU2hQ4IeHSHd5E+50CaXu/khwf7tzERv9LBjLjPZMC3vkJWnsQMXox5GWSzdFtfdy5sDGIo5d7Zgu9A1rp\r\nx-amz-request-id: 5X2HY92B73H4G8W0\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"8c9a8c477f324c88cead49db9a5fc1a2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dvTdjQhaHPc3d2gEiPjuvrzI.pMVPEqU\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 4876\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0RNIlv3WVaJ3XM%2BpcnPLs%2Bw86HP%2BXIGRCKl0%2BH%2BBDhi0bYkuSaVBA9Oq17sUYQgMrZ8CcDF%2FQbCItRkgiR7kNI55AmtToN%2FmVNnxCHbqvyHUZ846u9emi6lr8CS4VzBoj43%2FdJ9NeCOXGnS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ebe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12328,"size_decoded":13309,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c9a8c477f324c88cead49db9a5fc1a2","sha1":"8a8a7c615c7f00893e4c3374ad134581a053c8ce","sha256":"3672b3785d85e582ef497a6588dbe75cef4c60f982f678549f309fe784400a2b","sha512":"849e4018007f9b5406d4910a2da39689fcf847bce6f8586c7db389066af1efaf9ae8ae5bd374401b285d988a16fc2480be1e813a6ae3e2af78f485efa523fab4","ssdeep":"384:BFv36FCrffjNiI0gXcwWIzS3qJ+GmJQauo:jIqaGK3qJGbuo","tlshash":"56429d3b1465c94a4b535f7ec1ed4bb386f31224cdf224e69d781a02db0e61a2f390da","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-07-13T06:36:37.590549Z","times_seen":1360,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/favicon.ico","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:34.303Z","timestamp":1783894654303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:34 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxDywj%2FT4ClWB%2FzJGuQqbn53r9br9muOTBsorj%2Fa%2FV8fXk8aMffaRHh5xunwPyr9JWLN8mbulDlZMVe2xclR93BsQIFaCrdsaLKSefIw5wOejBPdaChJRni5owk8kbg%3D\"}]}\r\nlast-modified: Wed, 08 Jul 2026 06:00:08 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4de768-f32\"\r\ncf-ray: a1a36b356fc4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3890,"size_decoded":1522,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x29, 32 bits/pixel","md5":"b20cf1d4713a74ed25c3a3a46ad986ab","sha1":"3dbde0bcbb6686dc54446a003d80778e8bd833b5","sha256":"d59db84de9b2e35e9023faa757523585e3c1e1b8a6c23fa4d4a9b818cfeb3c41","sha512":"b3fda89a3221103dbd8a56381c1935e9b6164c7b6544144f9e5546c2ac91a59171f0338fe418709e72d87cb5df30bb2bf342ad3dee0d4325b9450eeec096ed04","ssdeep":"","tlshash":"0781afc392d1115cc9182bb6ad370e7a0a9bff076db9f1c886ac70a47b7b0d7441b515","first_seen":"2026-07-12T22:18:10.066246Z","last_seen":"2026-07-12T22:18:10.066246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/utilities.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.928Z","timestamp":1783894652928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/utilities.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 May 2023 07:15:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"646b167e-760f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1%2B5qg4nqF1fZHASTHI5ysbEZSIMhX6EqpxroUSyjufH9FoD44I45zfz03dftHbXexkxJVkAlnK2aFSFY85FpGCCIVUM51EKbHnMyThylIAE1ZQguGYPE4Dsa1WmuLM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2cdf56569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30223,"size_decoded":8042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30223), with no line terminators","md5":"b95253adcd343a80eaa96b8f57de0c23","sha1":"43ae118894bbbf75e74cca69f17d4b7bd5aeebc9","sha256":"9a05710bb08c351a80c1d2e4e84db6c39e084a5f6eda3d2577b3d273adf218dc","sha512":"10f52cc7b6a547830c0e9f3e01ff6ea732131703a8cfb44701b884e0fa7b069c043a959be2fd110aa1e6883403f6ae819c8c9c02824d25ccfba54e796a709c9f","ssdeep":"768:ecCd1AtLF9G6ygIz8m0fCqvGWE4GG86Eepp5gk:PIz8m0f8Lk","tlshash":"48d2c96870da6032899f42af24bf178db6b1201a9845c499787ecdcc1bb4d4d92e7f7c","first_seen":"2025-09-22T10:46:15.845781Z","last_seen":"2026-07-12T22:18:10.067212Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vc1.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.599Z","timestamp":1783894653599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vc1.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:19:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2ce-22bdc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXv23aJHX5FyuemZT29ogIjTZzJYhVFY1LpKXY8hldGLbZpQm5%2Bqzcft1rL4kAXeyFTUOaT%2B%2FyrP4shqrh9LDld3CgDww%2FIuLFuxmBYTU4emqYsWcwZtyAqufZh7MS8%3D\"}]}\r\ncf-ray: a1a36b310f93569d-OSL\r\ncontent-length: 142300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142300,"size_decoded":143089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c14dc95c150cdf701d3f4a1c43a8768a","sha1":"b09d0115f66adbfd7f243747cb871282a137da82","sha256":"5290fcac622cdf8d554daab6a6cd377c6567abf8de9529bac0c6d5832845373b","sha512":"c31cd98decbaba826e2356a0d62f7a7aec4f899724ba8aa3386dc59634ef2257b719166e17b07a8c56b20844b5a9f492a0862b22512194a7f960d528280e3a5b","ssdeep":"3072:wJJFcsrYaSaXA15nQkeurSw1YIFn9DDv4SRMZUYPqNqeIZwuHgenLR:YTYaFA15EqSgYIFn9L43ZRDPH1nLR","tlshash":"5ad3123388f78218ee3b48369d54a6f863774aba99a0c263b427590df5e0505d3bc1df","first_seen":"2026-07-12T22:18:10.068159Z","last_seen":"2026-07-12T22:18:10.068159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/325/large/Tether.png?1696501661","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.947Z","timestamp":1783894653947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/325/large/Tether.png?1696501661 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: Ay8q9nGbMChcMjbYoelp6LmE+hDUq+MaDud+yJHGChWif07Uh2s60TZYp5jz/vybc0+mDNBE5Hg=\r\nx-amz-request-id: 8FT8QZFSE8DVC9VA\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 29 May 2024 02:52:40 GMT\r\netag: \"7768a86999a4abbd7aa72a688ab9f45f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZGy4ZbYaJZwuUhw8hmG27eYu_ersPBoC\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3797\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLzfWin%2FocfhnK9OXD%2FwBo6qlFLzovclSrHwJIcen%2BsGdAFPYpKajshVFuZPj8Fl1WBxs6STkctELah3pWlpmHbYtgVpMQ4ZDeeF0%2BCoI2CMcrqZHLVGL8SpnkeqqZkS%2BO%2BA%2BGy49uQJXcFc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335eba1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11843,"size_decoded":12802,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"7768a86999a4abbd7aa72a688ab9f45f","sha1":"7a000148961198a425c7a63b3819460a85293667","sha256":"fe92c0abef2d3d775e50e42fc693394737571b498e7ed71ae07b82cf4d537d36","sha512":"65a56307a3906940d8ac5fda972cc29daa25a2045c7fa604f792f6c7a7600a8e84a40f73aed4985add0204ddbeff8e07953c7c7d622e6634ee4b78ca3c8d9299","ssdeep":"192:eSHPmg+UxC6bMe56ixy3tTnPQhNNc4aeOMLiqgg57h++a1nZ:BHumC6bMO6Z9jKNe4aSfgUhBa1Z","tlshash":"aa32b0556cc79335994f7060a9fb378cca33eb51b4a16a5c7934b478d08a83cad02755","first_seen":"2024-07-10T18:48:43Z","last_seen":"2026-07-13T06:36:37.600371Z","times_seen":508,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/6319/large/USDC.png?1769615602","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.950Z","timestamp":1783894653950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/6319/large/USDC.png?1769615602 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: CC7dHYMFUrlW52KTTLpmpzcbPZzNGd9jqgotZnDsPDA4GEkzxSQLLIYxEuZ/ye8fwFKiLkcV2iA=\r\nx-amz-request-id: 7N5TDC4BNCP5PSX6\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 28 Jan 2026 15:53:26 GMT\r\netag: \"5d978ed5bf6722f8aa47803e98601c22\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: A69N3Ta2vxFWBVa8nx9zGuRXf.EUV5jH\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6130\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEEevkjCib4cO%2F7EM8xwganB2J590ot0pFedrhUZRzw2NArRBmW6tqBYVX%2Ft3zZd1Y9wBAISViZ4kW7Xz7IHeiihkJ%2B1%2BcvSMMSoBMSyUyjp3G8bV5xDnUvRXvqHZBk%2FD33wel0YBOIlqJ0u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ebf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26045\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26045,"size_decoded":26998,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5d978ed5bf6722f8aa47803e98601c22","sha1":"6025637dc741c5549f127f385ae3860857c79036","sha256":"816df62109661d5ab41cd89093223a1cabb88a5e20bf2a382a80f7873be90266","sha512":"22432c467bc75642b0fb9f52d503af65e4f32ec09c24f44aba813480e176bb8d6369f3f0846c57e03016b0b01c3b212ab0133efbff7cd7a7bf7a2f741d852c6c","ssdeep":"768:L/erJkFXSrZWkiHvabNxuIqqSyBoVsUpDH:irsXSrZya67yuVdpDH","tlshash":"1ac2f16f0e6e250b845635e71349a9cedd908dff629932ad4d40e89a372ec03cc34b74","first_seen":"2026-01-28T19:24:44.264953Z","last_seen":"2026-07-13T07:16:51.093136Z","times_seen":564,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/68480/large/figure.png?1755863954","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.953Z","timestamp":1783894653953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/68480/large/figure.png?1755863954 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: dMHyIYeEaUtWMLI5f6JG+K3ChePR4ZypP3juQrqehM64Tn838tFudHObUg71eWOQORGsVheV3SR/oF2fYd26Z98j8ycxQcm1\r\nx-amz-request-id: 4SH2NTXS4JEZVEJV\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 22 Aug 2025 11:59:17 GMT\r\netag: \"a9280263a1312b0c54c6a9dac6ecfdc3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hji6HocgT9YbLVjw4HJ00XWYY4aK.d.F\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-bgj: imgq:85,h2pri\r\ncf-cache-status: HIT\r\ncf-polished: ok, orig_size=3867\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeCsFelNSRJzq2Mm6KljzmaoKM%2B0lJToe7aHrdQA7FJ4ydwPBNDk96XsTJFkQHhqA7R7UZdDNWGkn7V5Ud1ov%2B4u9xqmnbigFku1A4QinMSBCvMSWiwF5ICriY2dT8Mz%2BmmZ76rxGI4BULmz\"}]}\r\nage: 6532\r\ncf-ray: a1a36b335ec11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3294\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3294,"size_decoded":4318,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced","md5":"3f9c410a3be6fc5650046b0cc72d2b4c","sha1":"df397637f0c2411ed57c6d2fdf807c658471333b","sha256":"fbf05f7ede614ea8d0ed399c03df6f036cfdbfc1fed047376eb2fa6550d2a581","sha512":"f4c8478642158bb97fae57bbc182f6c2fcf00c2100d6b58ca9e0728a80c591e24a1d4e2bdabc73b3b228b6ed8abd00d0fc8edb14b845ef45c06160562a206ae3","ssdeep":"","tlshash":"69615b86560b9bb3c4e93b077d483ab6d07097de38723604b3b9d2844c52ea67f04d1d","first_seen":"2026-03-28T10:47:52.840231Z","last_seen":"2026-07-13T02:40:12.589478Z","times_seen":36,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/owlcarousel/assets/owl.carousel.min.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.870Z","timestamp":1783894652870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/owlcarousel/assets/owl.carousel.min.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Feb 2017 22:13:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"58b5f5f8-b78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz00aau4hzK4W0zA1AxA7T3CL44sd%2F8Ua9nCTOK%2BFZelMVEMxCKx0fDFrRH4My%2BZcUA7T%2BoYQHB%2FRusm01SSt73rhAunE9prC6SnyYOBVvHk7VnG95Q383OHMrJmjU4%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c7f3d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2936,"size_decoded":1554,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846)","md5":"de0dfbabe627afa1b718d848b6b58e97","sha1":"73d8a692734089983b00005d99ef8e5e5b0dadeb","sha256":"016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d","sha512":"1aa3ffa639729b094f6fa55deca993e586daa6fa30a6d791abd7dfbee7e25d8669d18a4c4ed47db48ebfbf75378458b537d310997ba6ff205f10bc6863e4b533","ssdeep":"","tlshash":"7251bde4354b215f480fc32219d85e87293ecd52d8260a5a92bbd718479ae2d113ffcf","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-13T11:24:05.675409Z","times_seen":12242,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/css/lightbox.min.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.872Z","timestamp":1783894652872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/css/lightbox.min.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-a30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CBq0plPUSVDH84ywr5AM66JKE41mBLwtae7xtmTHPTCAjrrM2r0Nj90jXKKLDXB1lFaayBu%2FI6kh5gNrpW58nx7rKao3jVGRUxQHv8rzKZVDjpWykgBabgfDjKtZ4M%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c7f3f569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2608,"size_decoded":1527,"mime_type":"text/css","magic":"ASCII text, with very long lines (2608), with no line terminators","md5":"767938d77eef356b1ba76c3897384948","sha1":"27f77d2a57bee715732b0fe219baa62768544a90","sha256":"6ae3e827093ff912ba2929226fdd8392ad58e6112466f2adbd2c2e72cd794a48","sha512":"1087b2cfc8f28052eeaf3e1104982d6f6c41711eee196b3a1abeaaca03e8c06d77bd895821a967e45c87f8337e75ade3c0fb5bdc3abea4b03dc9347eb81dc562","ssdeep":"","tlshash":"e251ee36b354701ef833d246b9d497d94668e1e3fa731faea248a132d1872543c37e88","first_seen":"2023-04-07T12:56:41Z","last_seen":"2026-07-13T13:15:15.881154Z","times_seen":1882,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.bundle.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.899Z","timestamp":1783894652899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /bootstrap/4.4.1/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"a5334e475209f965b4862f3bedf32618\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:09 GMT\r\ncdn-cachedat: 04/01/2025 22:45:54\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6a43eeefcc96eaf68b49e984fadb1ae8\r\ncdn-cache: HIT\r\nage: 2735417\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a1a36b2ccc560daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80698,"size_decoded":24368,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"a5334e475209f965b4862f3bedf32618","sha1":"fac45259046dd90b16d251739108002d67a00b54","sha256":"394156ee114ed3faf968419340ecfd17f69740eb7e4f0a88d59e1f6d5bf0c34e","sha512":"738c1384f3c2326bb8c6c56e7c91e8928800f57e246b9f1ccbd70461fe6dd78ef04b0d19a38ddfc1d4f2fc80b4935a0bc5771494fbd664c9c3f1b7bad6cc16ee","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5","tlshash":"0473d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","first_seen":"2023-03-07T01:07:09Z","last_seen":"2026-07-13T05:39:00.902152Z","times_seen":2571,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.wefigold.com/publicApi/getMarqueesList2","fqdn":"api.wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.765Z","timestamp":1783894653765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"OPTIONS /publicApi/getMarqueesList2 HTTP/1.1\r\nHost: api.wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQdY9kgRpPxfwco2l%2FQiuy9uD1EUcqHDB4AUwlFvuodXfL9PyLdQSv78l%2F8Ha5a9FdRjDOzRbGoyXq5bm%2BnH2ZYUURl3uuriigyB5y20%2Fxr2lO0tlY78zo1Dhlj3ii9549OQ\"}]}\r\ncf-ray: a1a36b322cee0731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":912,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T13:17:51.40421Z","times_seen":17213533,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"api.wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vc3.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:39.683Z","timestamp":1783894659683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vc3.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:19:50 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2c6-2bf96\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vXVBkf6LzhgA3ePd54Q%2BqjQvY3N2fMp9DcXxWlA%2Biif%2BWzf%2FSWF%2FKVhv%2F7Q5g%2FqDvT2Y12bzHoyZ5vpO3Eva2zk%2BLMet8NIlajhK%2BXa5qj6oo7YZ%2FtPpiQef3mDLtg%3D\"}]}\r\ncf-ray: a1a36b570931569d-OSL\r\ncontent-length: 180118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180118,"size_decoded":180919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27d666bce30149049ea338e81ad3ae6","sha1":"d731dec40164845215588a70c812f51673a62949","sha256":"301072a02665e7eaf2eba3fda322702865d6859e8508b5013ff843d718210c7b","sha512":"cf3324375d0085c28ff54639ebc0c948c807d40cc05d481523da8a8a4e0e0b8bacdf543417976f0b01d16eb22bfbf1c0ed486e05e6a551c120c9402b4926402f","ssdeep":"3072:2JJKvIyy7ePH7CSqvKCfGyNAHSWUJfJxylko71xQBLVyYFB0NKXXYK+Sho12gA+i:xXPuqC+yNAy7fSkm1xukUBUMaSii","tlshash":"ad0412169c2ec721cf3e9c38ddc25eb14e629c50ca30aaa33bf1756d2e83524d18d55e","first_seen":"2026-07-12T22:18:10.046846Z","last_seen":"2026-07-12T22:18:10.046846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/vendors/tradingview-widget.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.921Z","timestamp":1783894652921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/vendors/tradingview-widget.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Jan 2023 13:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63b57964-156e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jc2BB7iJ3Hg6FaHt6LCvKTIbpjkWnP6wNCvz%2BgqblX9eTxh1Zg%2Bw0O2IoSj4olnHsgyVIMWT2HMrU4Tp7IN%2BWZrZT9eIcAo%2BY%2BN%2B0kkdj%2F2la1Q4VkHjF4tUJYN5kTc%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2ccf50569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5486,"size_decoded":2359,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5486), with no line terminators","md5":"3d5ba9db2d09ddaadcf0bcb79a18840e","sha1":"8fd0d0b3249ce5865cbd23baad7100294c69f72d","sha256":"4eec74a8226ee9ae8ae7b2f3ed47ab3ffc27036d14e883b14e18c05f459d4815","sha512":"26b4d18199d07579a5c8f7fc363bd311ed54526cfe1971d6f63dc1741724a54047a84d926ab8bf9ac9f3c84c162469f5da82ea017ec1e0429c5b8ed93076641e","ssdeep":"96:x6z91qP+58F9G66NILBecjxszor5/Uw+0VhgeaSS9OIVz2iua/:x6x1yF9G66gQls5/J6eCOIwa/","tlshash":"65b1836af915fdb497c9402f102f5b16b2c132d380b45848b68ef0ae177ada44b63b28","first_seen":"2025-08-14T22:30:55.012511Z","last_seen":"2026-07-12T22:18:10.072395Z","times_seen":17,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:17:32.211Z","timestamp":1783894652211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 12:33:24 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2VMSU%2B15pY4EfY7wvFi1qYZfaOdlBUbMunMN5yqbV027k85d7DkT0oOVeZZoHm%2Fc%2BM1jmrYmtonpjE1bbTnejFvWqfaHZ2OJFMg1SnXZpn2iWQbk7cndaStgddfhqo%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b288f14569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4175,"size_decoded":2262,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4175), with no line terminators","md5":"8f05667d3a576cfcaa96fadd537eedb7","sha1":"726c6b9bb41b8da3f02b837f1b7913de5314a745","sha256":"9ceb3b982757cc7ad9ca8a892d2c6883149060fee804185641b44a32ec861e03","sha512":"608e9ad5b322342c097904aa162795062b493554a2b03d9dbcf575b65a0e744528948ce3276947e3abc89c6cff521f4a0f675d2bbbaa08273bcdd610e6cd24e5","ssdeep":"96:zRksldMhSQ2+D53USbx+fabnTd8pqnHRpeYbfAZNU4dK:CGD+9NXT4YbCNU44","tlshash":"ed81325bee04ca58236058b9747ab15cc6bad00bf450ecaca6f9006a8ef47da487bd01","first_seen":"2026-07-12T22:18:10.073265Z","last_seen":"2026-07-12T22:18:10.073265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":12,"connect":15,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.874Z","timestamp":1783894652874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nage: 986156\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270035-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33966,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T13:20:54.545841Z","times_seen":24701,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/stake.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.883Z","timestamp":1783894652883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/stake.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Apr 2025 10:06:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6808bbb4-e62\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRqowTLWIxEYn%2BRJac0kla8uOSm2TNrdvV2QXkY%2FAQRE%2BtLN7CpwiRSts8BMZGoGzDq8jdWrtt1I6xUUWsGG%2BlO5HpNxQSRl%2B7b%2FbFd82iuNelDz03MAiXkDVsSGoe4%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c8f42569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3682,"size_decoded":1806,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e98a355d374b51f7c72e1c4ff4336259","sha1":"f5259f415d9167420ade2c4da47737a9f9341925","sha256":"56ca829ed067e70b4ae4ac2f7f2be785d948d1e055f490da97d7e79dc711784e","sha512":"cd3ef5ec5c3b59368b6ea95e05ce44f1eededc85c80fca69c4a0d093caf881474b0a43bc71f6838ed2d9e8ab97076edf9330629e5e680454718331e855060a00","ssdeep":"","tlshash":"50710178d74b300bd6379a54676b0e29efe441638a02416c76f462606fba0ede310e8d","first_seen":"2026-07-12T22:18:10.074758Z","last_seen":"2026-07-12T22:18:10.074758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/config-particles.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.926Z","timestamp":1783894652926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/config-particles.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 08 Jan 2023 09:10:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63ba888a-8a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLj0KZ2WjRmoLJuCUSjh4rfW6BSqgL50%2B8ZvyVUZ4OfydnvpBb0Ts%2ByCgpTOQaLOx5iz1CQ07wBWOU%2BRwdd7%2Fd0QlVQbehSg2Wx9cQnuDc8377bdMGJ7U%2BzG38j5%2FfI%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2ccf53569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2216,"size_decoded":1332,"mime_type":"application/javascript","magic":"ASCII text","md5":"054591ae53fbdead7c6b5b20e44fedc5","sha1":"f59f112d8c9450b631a8624a95331ddb826286bc","sha256":"649b167600a5d5ab18bfa5e65a3c4536f760adc4ba076267145ce7c103424125","sha512":"141dca9b71612f2c1dc9ca81e53122ddeae715345dee68d3bee69b3b1e1c6602ce4f482012e87181c951a00a41407d24f83053f08635dfe62545d6af2d844a3e","ssdeep":"","tlshash":"b141282dd9b41cb3004ab03508be9247b570c6570d2a3d35bd4c819c5f0ee6d65be7e1","first_seen":"2025-06-12T06:47:54.561553Z","last_seen":"2026-07-12T22:18:10.075675Z","times_seen":53,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.wefigold.com/publicApi/getMarqueesList2","fqdn":"api.wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.759Z","timestamp":1783894653759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"POST /publicApi/getMarqueesList2 HTTP/1.1\r\nHost: api.wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nAuthorization: Bearer null\r\nContent-Length: 15\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"page\":\"home\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"51-cn38jNJOthiiMjMMuzuZTaAlv4c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoM%2FeoDUOcbtXkdd9UxppxiR%2BxLkOztjRCfDQE26doeOZs5w7vc7S3IB0czhduV%2BXKzsa1qEUK%2BJXEOMoVrYz2t6ofgcqA7iyB%2BfE0%2BfNaKheHGLyPOVGzixrfS49g%2BeQX9o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b329cf90731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":81,"size_decoded":954,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c86aade57c40cbd5ef5a1ea2c9b12814","sha1":"727dfc8cd24eb618a232330cbb3b994da025bf87","sha256":"232040aa3262d343d30c6b51fcfe339eaea4d2967f17fdbb250e95292bc835a3","sha512":"6a540b415697c4596720c91f3252beb89d9462d1097e13d04e1e19c15b1607a4704424616002e952dbbb0a0961464bbcc62ec9f38f3f3f03ba1a9fdad44c4224","ssdeep":"","tlshash":"75a024030d0034d151cfd10075143c01d5c0004fc1403031454f00dccf4d1537dc3005","first_seen":"2026-07-12T22:18:10.076207Z","last_seen":"2026-07-12T22:18:10.076207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"api.wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/easing/easing.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.902Z","timestamp":1783894652902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/easing/easing.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Jan 2018 11:44:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a53598a-8ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqpQEu4DCz8H4rggSyCmw6%2FzZbLv9Kc2RR4wjssHyXuhM%2BB9Vk71l0u2R23p6xXQ8XML%2FIdu0IOPZU3I0fEnxvIxaZuTLqMLcMgOIjVDuwN6stRj7mlbN5mnaEIbZno%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2caf49569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2303,"size_decoded":1514,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2301), with CRLF line terminators","md5":"d64116a742887080b3a0abd09e0bdad7","sha1":"8cd4375fc3c60237ea3994209d17a57ccbe6b0c6","sha256":"901eb80cc3f8c274fe6711bd023884258839610c9274082a4881f71e2206b4fb","sha512":"d2a0568b71a2ae4a01db28c02903d35c72e9a1090814e7a8dbe9325d45450ef7f75c29e9a1f0c6f9bfa6843f143817d9e4ae3c25e0e7f814b22ff476f8767783","ssdeep":"","tlshash":"4b4107d9f9c3b75a934275e0162f200bb22e6eb000ed2530c66174aa7d3831d9d3bacd","first_seen":"2023-03-07T12:05:14Z","last_seen":"2026-07-13T06:33:37.406565Z","times_seen":2111,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.919Z","timestamp":1783894652919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\nage: 4007\r\nx-served-by: cache-fra-etou8220054-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":44800,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-07-13T13:26:43.631554Z","times_seen":24896,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/images/close.png","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.810Z","timestamp":1783894653810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/images/close.png HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wefigold.com/lib/lightbox/css/lightbox.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-118\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGxtHQZvM88GlHDcPY%2B99hdy0AVnescKBBCb17ppOO1Gswr9wAQMLtJLHkexSbjjGg0RB7BQNzS3Y2NUgtqpha%2FelqpbPmcsgu8ZTjCYUZ%2FIx0D4Z8uS%2FgD5LEmyH7g%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b325fad569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":1049,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit colormap, non-interlaced","md5":"d9d2d0b1308cb694aa8116915592e2a9","sha1":"3ca48361cfe0e41163023d03c26296f375bb3eac","sha256":"5d62e6c90005bfb71f6abb440f9e4753681cb23bbd5e60477ab6f442d2f0e69c","sha512":"ae70339ec05f19d698a319cc265da583814711acbefd81ddcb7d6d5e59934b78b289e5a55c666af62216a8f9ce5de60afd6f41c54ef7e4ea569d5458cef78af5","ssdeep":"","tlshash":"14d02bde1679ec69ec90667161128210d83778517264a145704fa125944b685f515367","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-13T13:29:20.796784Z","times_seen":21818,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/my.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.885Z","timestamp":1783894652885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/my.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 09:30:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e51ad0-1723\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKeLrrTCTqyjBn0PLqfbK84XfdOrK04wSDKFO1HeZE75itMj3pNvn%2FOO2ILJQtBVrxUEqTqbut6BT0I7ou8qORLKfzya8lhXPEPOGvhBGKa10TDfXMMBDH6YEA%2BfEQA%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c9f43569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5923,"size_decoded":2211,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5a77a019164000d8671edb5b7536ef9c","sha1":"a723d47c7e9f439559931a4c7b15569c963eb49a","sha256":"6def0ae3ea77ac42cfe4a3cf769166343ce0a2b14aa56274e9fb40dab3b16f41","sha512":"18805c53c79ef949b7e8223ffbeb59a4c5b3b6931168002f564da17d1c691e36af0cb780f083d4db6b82cf767a2e84859ee8f2eb273e0b79fa4cbab644da101a","ssdeep":"96:kMrO2/u/GBkxNy6hRg/UVvNJF6qFF4yUjvUj0tIuFMTIworZx+:fS2/u/G16hRg/UVvNwyULUAvrS","tlshash":"e3c12159da4b2002a233ad547fb20a6aebd54467c60651fd3a98524c8ff71b8c371fce","first_seen":"2026-07-12T22:18:10.078758Z","last_seen":"2026-07-12T22:18:10.078758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/reserve.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.887Z","timestamp":1783894652887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/reserve.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 09:30:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e51acc-ce3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oher%2BX41UOfOn%2FVWwqHiZbiewahAxQmy9AVN7LvzQSITZAaEBZHl6SczgNllM%2BEAY7fTVpLr0vjTC5XTs7j%2F7Cm48XcDXkBNoGsVQQkuLnbVnQ9y0HmXFay8QuWO2lo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c9f44569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3299,"size_decoded":1625,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"53964a64f8796559f4b4b8ae9889a5e6","sha1":"3ca0a38635bc88e1fbc80cdb2a13118820e6dc78","sha256":"1fae99cfaedb7847b296bc3c6e6ddf61e018d7f34cc9b64dd22afec8bfe2c1a6","sha512":"0f8ecd90e1053fe84ce9d2afef10117287d13d1b958fbca88e788c7cd0565b593032696e4f48e02ab5543f225e2cd8cdd849dcf40ad9645056bca685f3b1981b","ssdeep":"","tlshash":"48619ab89e0f31075237b6543b570d25fbaa026b8e19006b3fa47128dbb18acd721d4d","first_seen":"2026-07-12T22:18:10.079678Z","last_seen":"2026-07-12T22:18:10.079678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/mail/contact.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.914Z","timestamp":1783894652914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /mail/contact.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47kPbjM32FcSyx%2F1XMfHn5XXwt9z5iw1zT381Y%2BP16PQ1OEb8SoKxmVNdLZhHv5x5RRsgRFGTX0m%2Bar%2BhhizNNB8lF4nUSZQ1HTMQJ%2Bkn3wU%2FuD%2BkAhKZIcEq2Q5KFU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2ccf4f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":733,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1m\u0026limit=100","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:34.105Z","timestamp":1783894654105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1m\u0026limit=100 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 4578\r\ndate: Sun, 12 Jul 2026 22:17:34 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f6ae8012-fba3-4fa5-9dff-94987feb0627\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 7_scFKJmX-r2-RuAFldzLtKx83EnCMNi0sCBhKNsKcDNf-cvcxawfg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16523,"size_decoded":5500,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2b02124fd3b79da37d9c321865cdc7ca","sha1":"6f21990fcbe1dc61ea55f321d6954808a67aa073","sha256":"36551d8c0a59f2b963896aa1fd99a5335b0e5de33e0a2d50bd6a4ab5a932534c","sha512":"8e535e1d316bca9339c68814d5c257e090eaef1b4e8b8422b5d74f9ccc66e9b4c725983da018e0969bbfa13745f209c91c4a3bf722f882c1b9c1d7ceb48410c0","ssdeep":"384:KTmxWfrJt0LC203SfCtls919/EjYav6Ytju:KTmxWfrf0LL03SfCnYlZav6Yty","tlshash":"3672c2531b948a74fe3b8c1d3791f856b976305bacdb0ec4c9d576271ae2cba5708320","first_seen":"2026-07-12T22:18:10.080679Z","last_seen":"2026-07-12T22:18:10.080679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.897Z","timestamp":1783894652897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.4.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15851\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\nage: 2736449\r\nx-served-by: cache-lga21965-LGA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38009, 75775\r\nx-timer: S1783894653.946757,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":31279,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-13T13:05:52.483419Z","times_seen":136414,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":6,"connect":10,"send":0,"wait":9,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/vendors/particles.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.924Z","timestamp":1783894652924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/vendors/particles.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 May 2023 07:15:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"646b167e-6c06\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKWaCKLTPTfffvSrI5lZfz%2BaN1T5i7e44k9AazSWeLNs9Nwo46sbOU1BlDwolk00wAIXoYvIf3W29EMYjuwhq4%2F2FSwcXjO7JQuojMiDmUe75IayG9T1R4cOVmygVRo%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2ccf52569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27654,"size_decoded":6755,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27654), with no line terminators","md5":"27aebd73f9420a886672c85d041d6c37","sha1":"079b6e3e63796ea7b8a4c992d606321c522eaa3d","sha256":"76b9e93e480a0f28f94b174db029a11d11174505bece89eb30ff39c642f5b8be","sha512":"79c4db6f1f7f150581054fb86612feb8c79fea8861baf23db881d6e9f1331ba9c48b3d801b6916ed27965123819f493ad4396aa644677176a9b296fe5d9e97a8","ssdeep":"384:MxfV9LiuqbRv3GZa42tK3nrEJ5NJuj+BJIH5n8CMTI7Iyebyieaw:Ed9L8vn03rEXNsQuHdMT1yebyieaw","tlshash":"a8c2530d63f62d7333c772b48edfc213a77044d71a8b06f5f568416ce6a8986525a3e4","first_seen":"2025-09-22T10:46:15.856249Z","last_seen":"2026-07-12T22:18:10.082646Z","times_seen":3,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/isotope/isotope.pkgd.min.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.908Z","timestamp":1783894652908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/isotope/isotope.pkgd.min.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Jan 2018 05:28:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a55a498-8aaf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haP1%2FpPBDFqQYjoKeCOSMwvbWZATYrO8b9DepV85bbCpwG%2Bvjc0ihC7V7K8wLiXkcIZyXUtC7Z%2BbFxh7gqftLm03U12dzCxA4ZeCUYzffKnxE%2F8IFPU%2FgkV9yfKOT2s%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a36b2cbf4b569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35503,"size_decoded":10290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004)","md5":"035a94b2b3f2103ab665f2885f953836","sha1":"3cb37f0004158f3e8f9194ebdb1d361dce6f0ed0","sha256":"2ac1dec2ea676653dc33c1dc718636434357b352fd07d6bf9750c69250191abc","sha512":"a53c8bb76b4a444bd288d60cdb515159142d8ceb7f85935823e051431f720ce6ef708c9d27edc3b3f0f100a4ffbcaec3ede91215fa6e6d887b7248adcb6f0c29","ssdeep":"768:9fyxzGdHc1zfA9ZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz291Fxt:Ux6dOjARP4Nnmc6FuCshD6cD6xS9ODzW","tlshash":"4df2d74f73403924468bf166966f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-07-13T11:52:04.6097Z","times_seen":5774,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/js/main.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.916Z","timestamp":1783894652916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mi%2F%2BQ%2Frj6OJt6iIB5YIFYFZ%2FX6XTHdvR6y6H38D7PdcjAdz67NiMGf%2F5GqiIMqw6JoOcrfk4X%2BhlvUVxdsegcDaRZJqzvnf7GqTJCddj6TNLby0YcsodRrODN4yGjT0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2ccf4e569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":731,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.918Z","timestamp":1783894652918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\nage: 986156\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-13T13:20:54.551999Z","times_seen":29055,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/mail/contact.js","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.281Z","timestamp":1783894653281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /mail/contact.js HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8bYqBWe%2ByaGKVVGVBEBA0S2AvmAg52JKPwvx4PemPTo43fHgqp3CwEvU4rB3dJGpu10csKWt1bTtDYb38btiwKgkSWDWK1SlHev0JAW5b5gJZB8vwp2MS2SA8ZkSxU%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a36b2f0f7b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":728,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-13T13:10:01.99793Z","times_seen":539161,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vds/vcc2.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.604Z","timestamp":1783894653604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vds/vcc2.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:20:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2fa-2b92a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtcedGIemh4p0pJylPRRuhierylq8UWylfvrvCz7MFeyCtuDw%2BfJv76B2ntFVAz%2FB%2BijO5STH%2FAkQ5%2FJ20D9sFL%2FLHF3dueaD1UWkLHXN7WDy1grYhJHf75TPiPrNjY%3D\"}]}\r\ncf-ray: a1a36b310f96569d-OSL\r\ncontent-length: 178474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178474,"size_decoded":179267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3471b49e1f1e7ad0fb15207d8ec89fad","sha1":"390261859f7e19d2f36c9a443bcf986a85248653","sha256":"72c759fae5515cc925317e5a45acc92badf0c22469c07f2c19c0d11077052e00","sha512":"fbc1bb99202e82f9f97044268905b41f44a133621e02a3de8d84f44e695ca11b8d4431fda7c01389af48b13c45a0351ff0a190d67fb86101d693d595dcdd73a3","ssdeep":"3072:BJJDQ60bHCipgDwFZubL9Ku1Kes0IoNiyPEyEyFNq6mSLHfZaw9R/g93yLv:VHh/5IDlm3BHBB/236v","tlshash":"240413f59ab2f37acef6e7bc4aad5bae105184308132dfc87d875453429b628f10c526","first_seen":"2026-07-12T22:18:10.085378Z","last_seen":"2026-07-12T22:18:10.085378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/images/next.png","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.807Z","timestamp":1783894653807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/images/next.png HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wefigold.com/lib/lightbox/css/lightbox.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-546\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVy8Raul0%2FkUCUhbLhGPoSLule9FmfqK9s%2FNpnIIVDZVQCcyAyKj3POoiH3gBbWm6xxRGFpcTwts2AYaSrNrm%2BHRke6XexhBv24Ux9SFflG2SZ8az6LnvbVBuoVBGs0%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b324fab569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1350,"size_decoded":2117,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"31f15875975aab69085470aabbfec802","sha1":"777e92c050f600b4519299c3d786b8f2f459fea4","sha256":"15b869b02c6fbaa8c6c26445a2dd2d9bad80fd27b1409f8179e5dd89dc89d90a","sha512":"edc920dcd2f5ac9a6e08098c6a59f888a9cb135ff4ef3dc2183931e065b6531e00e2c8acd3c329a3d90eb939ea3db318a9b677b5aa78a227815373d7008d40aa","ssdeep":"","tlshash":"c221d8f1f658249b813a8279587be1602cbf985e31b4cb8709ddbb3323b5c04e102376","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-07-13T13:29:20.796235Z","times_seen":20642,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1094/large/photo_2026-04-13_09-59-16.png?1776048311","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.67.142.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.952Z","timestamp":1783894653952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 22:42:48 GMT","end":"Wed, 09 Sep 2026 23:41:15 GMT"},"fingerprint":{"sha1":"7A:6C:D0:D5:FD:4F:F2:F6:0E:21:8F:DB:FC:C2:6A:FB:03:26:BA:A8","sha256":"8F:4C:5D:49:64:66:ED:34:00:50:8C:D4:D9:03:C8:38:40:42:53:9D:67:B3:CD:AA:9E:0E:D5:41:02:8E:46:BA"}}},"request":{"raw":"GET /coins/images/1094/large/photo_2026-04-13_09-59-16.png?1776048311 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-amz-id-2: m94wVoO2/IWuuoUr82gUeA9/1VTIFvQB0TXN7qyA062/y8A9BNbbl9b7EIwBTvDPhJ2uwPSDLaQ=\r\nx-amz-request-id: BEC7WSATWZ422KVF\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Mon, 13 Apr 2026 02:45:15 GMT\r\netag: \"4fa794f073a0f6929a3d0ae8fed43a7e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: bAddWAFG2XU3fKFBrfVhAdKBrvpAHmH_\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 6819\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikVSN6NtxsK5LchbXeGOTPB2ognQhWeOdr8EdKutSSw2P69FX3IYKmgwMioLNzW%2BvsZYogPfzpknm3Y8oSp3g%2FOSdf1vVb4CzVXK7IMrxSqBuENDNf2y8sa80qfFXbbMFHLy9Qm6UbNtid59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b335ec01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22303,"size_decoded":23250,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced","md5":"4fa794f073a0f6929a3d0ae8fed43a7e","sha1":"9953ce79a206288b1518dbd9e8d13433f5ed89b9","sha256":"8166615a145929317baf335da364249129548f110436ba92efdb31c6a8fc1b57","sha512":"743c5a88df9d9d6bd84e996fa9b3db71b743c27ac1b787ee77ba9fe23ded2889d6bd8116c1c5c164b8adc08f82377f5064aa7b658574be071dca7eae3533467c","ssdeep":"384:xgSMAro+UGnMllpfmb6s1KvI4TXxFd/DhQeywFb6ivwjVO/oA01DEKXD:bMV+b6sovI4TXxXVQMcpO2G8","tlshash":"24a2d0d4ea512c66d5dd32340a470ffbb5e3b2c752bc652a631b9b6b0d5d5060ac3332","first_seen":"2026-04-13T10:21:43.768726Z","last_seen":"2026-07-13T02:40:12.688916Z","times_seen":104,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1m\u0026limit=100","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:35.003Z","timestamp":1783894655003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1m\u0026limit=100 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://wefigold.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 4062\r\ndate: Sun, 12 Jul 2026 22:17:35 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: ce5fc2a1-6821-4e0b-8b1e-823f05a55d62\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: _j7MzdceRMLHY4-QIpScelFY0Oh7LY0434xuENusWkBSNn1yP_IRpA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15728,"size_decoded":4986,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"696704c372f58b82507b95425925e892","sha1":"a77e144bf6be35170397d4231050bc248241dd65","sha256":"81f9d4eac18127e83830b9c32744f9be3670d6f71f34253debc641966ce25459","sha512":"1c42205df3848ab8e8c90f913b452bf3d37c51897189ff90f7bbfe39d35a2068795f2b79c2694638f6bab283682747e726c7d2465838c98112d7da885da0cec7","ssdeep":"192:ytC4S4q6hnXUz8W8GueaPsWM3qQyfrcHzjQOS9wwbhdUsQqp3UJeUK+D3JJgRZkR:YxS4qKn0T8HPQ6joQOSOI+DLrdFh","tlshash":"a8625b512fd8d660fb7a883d37a2f967a976304aadde0dc48be0677309f147b1608720","first_seen":"2026-07-12T22:18:10.087578Z","last_seen":"2026-07-12T22:18:10.087578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.876Z","timestamp":1783894652876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\nage: 13948\r\nx-served-by: cache-fra-eddf8230180-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":5537,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-07-13T13:20:54.547281Z","times_seen":24116,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":12,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vds/vcc3.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.606Z","timestamp":1783894653606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vds/vcc3.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:20:46 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2fe-25db8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqzzWTwk3vMmO7QO6TVbibDziKjcGqUn5LeOU1Cp25Kq6TMRfN3koO5gjlM1vV2p8LP70NXKXxPEdHptMfdDc%2BAHEv9McS%2BP4dC6O78KzEvNzLLytE4f1WWWo6DUz5U%3D\"}]}\r\ncf-ray: a1a36b310f97569d-OSL\r\ncontent-length: 155064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155064,"size_decoded":155849,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce9ecde00116870898431c5f2c36e81b","sha1":"8dfcf25c2a6f8ac20ed1bf2a901bc35f1455e9fe","sha256":"f4afd119644e7cd20b38724f3b5e25eb8cc31d76e76faf01875b1454e34c10d0","sha512":"cfedef937e88abfd10aaa18e84a372a8bccd0d7ddd16be4b5bad06fc8754f4781b323164399e56d26215599394664c511d162e2ad36da85d777b8bbc88c6a507","ssdeep":"3072:5JJhIfB7GLhKkt3ydSKic2k4obH+kevx2ENlWpKCBdA3rGDWiORALJy:UfO531KTYoDHevMKWldwrUhLJy","tlshash":"d6e312b4fa13ede7c6eae23a72a076c432c01cb46366d4d32575b8bb45b41172a8703d","first_seen":"2026-07-12T22:18:10.089223Z","last_seen":"2026-07-12T22:18:10.089223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/static/media/fa-brands-400.c210719e60948b211a12.woff2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.673Z","timestamp":1783894653673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /static/media/fa-brands-400.c210719e60948b211a12.woff2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wefigold.com/static/css/main.294c36d5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 11 Jul 2026 12:33:24 GMT\r\nvary: Accept-Encoding\r\netag: \"6a523814-1cf9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbVIuwEkE0RFS%2B%2BkJD3O8YojMxnzl4cWjJN2oGVJEzvN6ddezh2kT6jkz7f%2BegtI%2FSWMsd%2Fmhk9kmT8eAM7zbXVcWsEGdrGT%2BkH0%2FMW9Jn93rKmfpIwUM8GwUudAmNo%3D\"}]}\r\ncf-ray: a1a36b317f9e569d-OSL\r\ncontent-length: 118684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118684,"size_decoded":119496,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 118684, version 775.1280","md5":"cbcf42b2e9228a8f5bad42717d8a88db","sha1":"31c30351084e2670bbe5c47bd342e11540a68717","sha256":"d7236a19bf23cbb2027280e8f51dc99d6c45976a2ed60de73382b034b18a2b68","sha512":"3872344124caac5d5831dd08ddab3532fe2d0c0991c6ab0939c460c6ca40aab24bff5af5fed19ac40cb7cb13b13e24bd32756d579996024ede587a598538459e","ssdeep":"3072:tDqJfeFhgJI8f3pOO/qjV79EDtUynAuWKeWY2xKokhAmjjCoTnRG:tDq0hII23EOSjPEDWynAXKnYvotwHI","tlshash":"d0c31223c140cbbfd4f3909ee49da97506cb746734a1b2809335b2355e2e9997243eeb","first_seen":"2024-12-19T10:41:23.150574Z","last_seen":"2026-07-13T13:17:23.950691Z","times_seen":17528,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/lib/lightbox/images/loading.gif","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.809Z","timestamp":1783894653809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /lib/lightbox/images/loading.gif HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wefigold.com/lib/lightbox/css/lightbox.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 26 Nov 2017 08:48:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a1a7fd8-211c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T93tCOLdXmqrjGGt0J7vD5tLk9PhlzQnzjc089lEd551hhp3eVk5eXvWUUB8ULg6DmQlyCTBASxOH9MfhWwL8CYvGvla%2FMMYdx92pRJQu0BAmroSW9MlqacxSzjtWzw%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1a36b325fac569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8476,"size_decoded":9240,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"2299ad0b3f63413f026dfec20c205b8f","sha1":"cf720b50cf8dde0e1a84ce1c6a77788bfc5882d5","sha256":"225aa88b6ab02c06222ec9468d62e15fa188e39cdb9431d1f55401ad380753ed","sha512":"dc299ee8de6d5bb9d3a95a0fc200ea380c6dbaeb72fbff74e1e8bb260ee3deec6c981d9cfc05bf2409b8760613ef1c02bd7396456bec618f287ca56a7a93957d","ssdeep":"192:e8mZU0o1P1rUssaXA6RJiqlrcDUpTQ+ZSIWl7QBhr5z:iZc1PvA6RJiqYUq/l7Md5z","tlshash":"52028fece9242716ec37e7fa4248970edcc81de4067653096239360f3927139796a99d","first_seen":"2023-04-07T04:16:20Z","last_seen":"2026-07-13T13:29:20.758038Z","times_seen":26000,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://stream.binance.com:9443/stream?streams=btcusdt@kline_1m/ethusdt@kline_1m/bnbusdt@kline_1m/adausdt@kline_1m/solusdt@kline_1m","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"52.69.137.139","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:35.581Z","timestamp":1783894655581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /stream?streams=btcusdt@kline_1m/ethusdt@kline_1m/bnbusdt@kline_1m/adausdt@kline_1m/solusdt@kline_1m HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wefigold.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zKKdhTgspZZV37jmAegqkA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 22:17:36 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: DAPHeJ2ApHAlFAqk8S+Sv/5ITWQ=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":240,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T13:17:51.40421Z","times_seen":17213533,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":257,"send":0,"wait":262,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.863Z","timestamp":1783894652863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 22:17:32 GMT\r\ndate: Sun, 12 Jul 2026 22:17:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":1224,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4313e6367844adc0cdb4d6ccb86b26fa","sha1":"20335f134c7817c1e9d01f8c57fa2a36669af65e","sha256":"d6a90916411b5b4b696edaefd46fd4503e5bc622c14e490a09cf0de39696d418","sha512":"23a3392e96d2bb29dd720e4e65ea2e398651f8e7626361425e932732f1efa52dc14dbcbe5751ed7137e69916480f3fd2be5ebf4ef39a43c6c6200c9e777c7779","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpQ:lgKQcXr3lVwa3RzJZ","tlshash":"f7a19bd1087be114ab831cc123ce7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T01:34:36.284919Z","last_seen":"2026-07-13T06:56:20.888679Z","times_seen":7991,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":34,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/css/treasure.css","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:32.889Z","timestamp":1783894652889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /css/treasure.css HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Mar 2025 09:30:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67e51abe-13a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FscSwsXS4CdOkNAP%2B%2BAkDGUFqDPf%2FOuZydVTJb1hERBSJ%2Br2ai9tOBUHJ6YOifWozBHy%2FoxyABuG4rq2Yt4XxXeRlMwLaVQ1HFwuXjGZ4w%2Bbm0VXvvgNtm00BpFzAxM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a36b2c9f45569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5030,"size_decoded":1756,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"edff1780bda6e744b863bb7595910ec1","sha1":"045a87107f9d2599c36cfeda27c322ffd7e49e26","sha256":"66ae96e20d84b4f0128f38df5167eda34f330d2eefd439bc7544860b111ed4c7","sha512":"c1894b2745446bafe5d2256a267bc1b6b1ba94105a44a47c69986fd06a257cf81931269a949885564a425ccba3d7203b890e52e10538bec5aece0cb746b3e1cf","ssdeep":"96:x9mKF6dfFPzUj2UjrtIuFEtbI7UIIbq0RThnFIPRD6FaIPmyI4:xotzUKUP4tKabJBhnmR87l","tlshash":"49a1acacc2871007d23b96fc37728a38efed01a7d959127c3694a9606bb119dca34d8d","first_seen":"2026-07-12T22:18:10.092517Z","last_seen":"2026-07-12T22:18:10.092517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/logo.png?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.597Z","timestamp":1783894653597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/logo.png?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 Jul 2026 05:27:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4c8e5e-2fd4e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd%2BCZdQ2HBUNy0HqS%2FGjiWBN2GqAi5G1UIzkTK4zI7Of%2BIaXWP26qPvRbfKrr9Ja0cLLi%2BPGi3JDpEbPvUVvZ0EW6UcDsSt96wbNcybiwBi%2BZFBFTcB6ibTd9ZGN0EM%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a36b30ff92569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195918,"size_decoded":196691,"mime_type":"image/png","magic":"PNG image data, 886 x 236, 8-bit/color RGBA, non-interlaced","md5":"d0fe0ff7a5b5823256767979ba79df18","sha1":"9a26c99b55bf58918e1e8358f6143f3cda4e4a78","sha256":"a02ec7d92a349e5ef0f0c92a359702b2967c40ea1d4dce69b75f3deb9f42c8f3","sha512":"5dc661d44c6ee994c54d2a65e80f02b6a9a3f91d81e6730f9bb3949d97dcec88ed71f2b6c9df4282440e56c3ed5d3ba4795ff3abb128e1208b27dbdcecdf8069","ssdeep":"3072:hP3YwEN02kLLwhkTs7tPMobCEjXmoVFOLDa82NmgZjsVyFYSToXGFhbrqOaXnqz:hPIwEpSwCTs7yobnzVVg/amUFaCtqz6z","tlshash":"f81412faa46b0b73f7665464133b546e7717339aeccd1d0e356ca8923e2c92c6025c8d","first_seen":"2026-07-12T22:18:10.093521Z","last_seen":"2026-07-12T22:18:10.093521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wefigold.com/img/vds/vcc4.webp?v=2","fqdn":"wefigold.com","domain":"wefigold.com","tld":"com"},"ip":{"addr":"104.21.82.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wefigold.com/","date":"2026-07-12T22:17:33.608Z","timestamp":1783894653608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wefigold.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:37:02 GMT","end":"Sun, 04 Oct 2026 10:45:43 GMT"},"fingerprint":{"sha1":"3F:E7:BB:F6:94:11:66:CB:19:35:CC:4D:C2:68:9F:FF:CC:3D:86:11","sha256":"F4:34:CF:65:CD:42:9F:B4:F9:4E:39:C1:C6:42:EB:45:37:FD:68:56:1E:3A:84:92:A0:C1:93:0C:7E:D5:74:CA"}}},"request":{"raw":"GET /img/vds/vcc4.webp?v=2 HTTP/1.1\r\nHost: wefigold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://wefigold.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:17:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 07 Jul 2026 10:20:32 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4cd2f0-259de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYyusUqpQxfwWWZqlqQYlsziQmWQt%2BijIy4hex%2BGksRUsWzJC5EtzfJXMgWGrn2HwIqfPaHTlqIL%2BlbrBJbRdUm%2FIQ7lWxlNQi2s6imjgnrPHGt5xRACVHcrhFEZP0U%3D\"}]}\r\ncf-ray: a1a36b311f98569d-OSL\r\ncontent-length: 154078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154078,"size_decoded":154867,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5ce14000117f770f5a6c9f88f47349b","sha1":"ec6641338875e53c1141a38d44b3c93a09f5d7b2","sha256":"2a7b362f4f7bc561e1a5cd9b0b47c58519419d7046e252797f1e693d7cfd0b51","sha512":"f5dba98641cee228ce6bad134ce82f7d742526ebd62def37494a3f11a7b711483f5e3bad0b2d4a2913ed117bf06c9d42f6b06d0506813eb2c07132461a0f57cf","ssdeep":"3072:0JJbH4LVfwVkuvL5pSbriexa+jLec8N87peyu0poNxIfi3XGz+U7NCa3JPA:uHaIfj5YriexXXeTN8DhpkxIfTEKJ4","tlshash":"6fe312b26ee77e40fd16ee38a0a92b81b3e715b4e761948d3028dfc78c40199178f539","first_seen":"2026-07-12T22:18:10.095449Z","last_seen":"2026-07-12T22:18:10.095449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"wefigold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}