{"report_id":"04955ba4-090b-4f80-b7bc-53f4ad7d2ed4","version":0,"status":"done","tags":[],"date":"2026-08-19T23:18:39Z","url":{"schema":"http","addr":"app-wefi.co/","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"app-wefi.co/","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"title":"Sign in to WeFi","dom":{"size":3577,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3577), with no line terminators","md5":"4064fb9b0ba81d13842c94c5d52056f2","sha1":"b4d33ff2a108c5c4acb9b38fb5ef50b7784692f0","sha256":"e182209614beee33b9650425e9e2c09f05d61c1cd9e2fdc4755ba83b556ed28b","sha512":"25b8f135e312c8115f18aac567f54423a9b72a631806ea495ef82106d7f7d8874a9b66fbe7cb3b235f02d6982e0fea3399f7c96069450c39840d7cd8e8bba52c","ssdeep":"","tlshash":"587144354024a46fe653cab0b495fa4896aaf20ecd579894b36492af3ae1fd0c723512","dom_hash":"domhash7b4691f299ec8df27432787bed44a311","first_seen":"2026-08-19T23:18:45.250666Z","last_seen":"2026-08-19T23:18:45.250666Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app-wefi.co/","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T23:18:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"app-wefi.co","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-19T23:18:41.216576Z","last_seen":"2026-08-19T23:18:41.216576Z","alert_count":0,"request_count":11,"received_data":701592,"sent_data":8214,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app-wefi.co/assets/routes-CyB7m1d1.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"59889b56ef38de3ad88e7d40029cc019","sha1":"7ee5db7c661e40fda8de3a34659fb2f95d7be258","sha256":"d6ebb4501bcfa9398ee8670cb00b44541aeaa127d46d7bbe541153aaa25be5d7","sha512":"d6b7c4b88890e54633b51352d6ed5fd8781c350f08fb92a20aa486d71da7398447a5aaafaccee5e08944070d95bf0c2e345d14cda5d91a5433a5915a1ca93a7c","ssdeep":"192:VMPHjYwQTVihd0kwPQfg4Ieeecooy9D7yfD+ysy4HTly17wyyeZBye7TywIyH8yd:WH9sMT0k8O9I35odrtJsVefhKjg/lC","tlshash":"b562b699a28135d9f62709e0b36fc12d31bfd107e91b8d697a7c38421f118c87b96f86","size":15317,"data":"","first_seen":"2026-08-19T23:18:45.28008Z","last_seen":"2026-08-19T23:18:45.28008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/~flock.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-20T01:23:55.622587Z","times_seen":15800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/index-CVLIJyIG.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a8d77bd0c50ed9b432dff5aedef007","sha1":"8f69d442d2d9e647ffc706de16045b5a61ed7972","sha256":"cf00bec081b9640bfca836fbb3c7e70724b6d76ab006a67275123a5ecb0b022c","sha512":"cd28bc688d344697b0d5961a052b89a14413ee8632a942f7489847268236bbdc890527365f6937bc5dfdf577625625dbb004b02ecd74f543cdf71857af1d8ce4","ssdeep":"6144:E+iC6gqT3CMB7JjlQtnaYAVQ9m0vU+kcCnT40Ypwv2lJIrxiRnDGz2pKVkpqpQEP:GCUQaY+alLRDGSXkq5H8","tlshash":"a4c45ee833a6b1220bd651b2407f1502f33918566c0d4428b678eddf79f5849e6bbfb8","size":547858,"data":"","first_seen":"2026-08-19T23:18:45.277844Z","last_seen":"2026-08-19T23:18:45.277844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/Logo-BeYLhofv.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4a27fde22546ae90cecafbe4bb9a6b7","sha1":"94df47e39859a1122c66063fa1ffb9dd65a292c0","sha256":"bda924d78327b6ee93b362d6bba7ff79d63593aacfce2f57ba3e3c1e31e73b5d","sha512":"d75f3f01dcf2b71385df44e34a1ffea0172013fe66ae3680fd24deec38b5968075e9b9b2ada3a3424be75a6b6f11d2b5e1f63d48f4a5c2e8e65770a7f5e2b9ad","ssdeep":"","tlshash":"46f0e18b50ad70f96fed8444029e79866031d0a08d97d2e03271519db0d119220bff19","size":569,"data":"","first_seen":"2026-08-19T23:18:45.258149Z","last_seen":"2026-08-19T23:18:45.258149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/blocked-ips.functions-n4YE10VQ.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4d9bfbd89fe3df4a93f55e2c0306057","sha1":"56df91607b3fea3095f54154840bf39f5ecff7a3","sha256":"3e8f0a16aada5ef9fb9e7db2752069d649c2a893e40a3acb4dadc9a3bb2e360d","sha512":"dd261b2389ecf88395e37e7c0e5cce59a80624123123397ce4c26f79cbaeba34ff66adbbdbbe38221dc7786689607737c0b704f141193e54d22aeeeaa0615d74","ssdeep":"96:isJai6x+mAGmto/C/zxm3PL5TsoeJ2S+ry5fIzE32P8gLfhRLnCFKufMrp0AtTJ7:RJaiOAJtCwxm3PL5TsRYZry5fIk2P8Cb","tlshash":"86c1e9f93ed3b32643ac39e64016214cf6bf5659983ed810fb50972b25e4985c7eaf04","size":5764,"data":"","first_seen":"2026-08-19T23:18:45.272261Z","last_seen":"2026-08-19T23:18:45.272261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-wefi.co/assets/Logo-BeYLhofv.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.924Z","timestamp":1787181490924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /assets/Logo-BeYLhofv.js HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e498db515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":834,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"f4a27fde22546ae90cecafbe4bb9a6b7","sha1":"94df47e39859a1122c66063fa1ffb9dd65a292c0","sha256":"bda924d78327b6ee93b362d6bba7ff79d63593aacfce2f57ba3e3c1e31e73b5d","sha512":"d75f3f01dcf2b71385df44e34a1ffea0172013fe66ae3680fd24deec38b5968075e9b9b2ada3a3424be75a6b6f11d2b5e1f63d48f4a5c2e8e65770a7f5e2b9ad","ssdeep":"","tlshash":"46f0e18b50ad70f96fed8444029e79866031d0a08d97d2e03271519db0d119220bff19","first_seen":"2026-08-19T23:18:45.258149Z","last_seen":"2026-08-19T23:18:45.258149Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/__l5e/assets-v1/4fb642a4-add2-4b55-8ace-6bf7142e00ba/wefi-logo.png","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.933Z","timestamp":1787181490933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /__l5e/assets-v1/4fb642a4-add2-4b55-8ace-6bf7142e00ba/wefi-logo.png HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 5586\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"8917bb6ef4744df6485dc90f1fb1b8c5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2dce03e5996b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5586,"size_decoded":6150,"mime_type":"image/png","magic":"PNG image data, 492 x 108, 8-bit/color RGBA, non-interlaced","md5":"8917bb6ef4744df6485dc90f1fb1b8c5","sha1":"96c4fb115c6c061f365be4dcb6e62ca86637f086","sha256":"5c67cc591807beb6cdb21e2c259d2723d3d94fc1f1f6dcfac0b2664be6cd27bd","sha512":"2c003e33dbdfc07c42e5e8c634d042b46edb86d65b59ab980c61e49a04bdd47dd49d062dc050ce0f8356a698e6c32c7e120b554c0a3c53042dd42b1ef705571e","ssdeep":"96:bqJrjD+jVXXM1RdId+vKU09EYOL/PUn6bflBSdCkKQIBRdEyU8S0c4c6wgC1mAVW:b7BXXM1RdI1iYA/s6bf6BKqyU1P4cJ1U","tlshash":"81b19e5fee544bc598ba7f06b7333f364381834aa873cea163028d11572210e659f5b9","first_seen":"2026-08-19T23:18:45.261442Z","last_seen":"2026-08-19T23:18:45.261442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/favicon.ico","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:11.082Z","timestamp":1787181491082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 19 Aug 2026 23:18:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03f39eeb515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2641,"size_decoded":1558,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"7f14bec8f9f365cd565c9675677d31b2","sha1":"b4b9866b979dba7465d054e0fa3c67f2b201727a","sha256":"961122a7664d3fc8f1193a9f4d71fbb03eb2fb5d1cbf251b8373a94d4e4b1978","sha512":"b23c2acae4ff658bc55b0a61da864dfbea4cb3f2d424dec786f21df4d327cae26c120d83268bafb98d4f28f60d647d6847567cc9d52d99c0d4c44c0e730f9b21","ssdeep":"","tlshash":"cf5183b34c24151da6759934a830f144c2a6e50ac55add2dfaedf09f26c2fc2c177a10","first_seen":"2026-08-19T23:18:45.26466Z","last_seen":"2026-08-19T23:18:45.26466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T23:18:10.085Z","timestamp":1787181490085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP; HttpOnly; SameSite=None; Secure; Path=/; Domain=app-wefi.co; Expires=Wed, 19 Aug 2026 23:48:10 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce0399f95b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP","quoted":false,"path":"/","domain":"app-wefi.co","expires":"2026-08-19T23:48:10Z","raw_expires":"Wed, 19 Aug 2026 23:48:10 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP; HttpOnly; SameSite=None; Secure; Path=/; Domain=app-wefi.co; Expires=Wed, 19 Aug 2026 23:48:10 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14091,"size_decoded":4874,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"e66f91d0c2d3fee19f4bdcc32cd1fa0f","sha1":"806e730cb5ccea0f7a1bd2df81a10109badfac60","sha256":"afa36195b68162155603e8621e957a6d0b9e32b81cac28b04e7f70f37a7f7ab2","sha512":"20e9559f2b1f766f7572ac87aab9d51f0bb81f79298061e4ca0a6e5e070bdf36bdf09b2dbe8ada99cff7b49b6211f67ee69ed9da38bd2b8bba574e3ddf7a2feb","ssdeep":"384:Avnk9J5MAOK6mVu8g9E2TB3rt6QsMT0k8O9I35o8xG1a41:uk9J5MAOK6mVu8g9E2TB3rtAU1a41","tlshash":"8e5285e641523439d32746e1a6a9b31511fea50be687ad1cb7bc119e6fc1cc06363e32","first_seen":"2026-08-19T23:18:45.266954Z","last_seen":"2026-08-19T23:18:45.266954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":0,"dns":72,"connect":3,"send":0,"wait":565,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/styles-DGLzdQ2t.css","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.915Z","timestamp":1787181490915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /assets/styles-DGLzdQ2t.css HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e3986b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82950,"size_decoded":14346,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"ea6081a501378042fa20dd589a459c20","sha1":"b339bac6f5669078b1eed7de8ae684d4cc9f7d8e","sha256":"1a3d22d9ba61fda3056fd1ea5b45617e85ec559d717bcf78e7f385c3855ef7c3","sha512":"461fe5ba3bf406700b5367412122f5c9c34c63bdf4352f2e8d06ddd7b022ef990c7e00a1002abb97eea08804f014dc7692d28a27b3342cd0a5aa84840d3caa64","ssdeep":"1536:RcjXXh+qmwy3EKw+yFtq3EaUL1aGSsMq+WDhXX78E6XbK7988R988q:CjXXh+Rwylw9tq3PULZMq+WDhYZXr","tlshash":"a783d590b229d93f7c33a4f9938cb89c911ab0c0dd3546e9fa16712257c37f2ad67618","first_seen":"2026-08-19T23:18:45.269986Z","last_seen":"2026-08-19T23:18:45.269986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/blocked-ips.functions-n4YE10VQ.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.921Z","timestamp":1787181490921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /assets/blocked-ips.functions-n4YE10VQ.js HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e398ab515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5764,"size_decoded":3057,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5764), with no line terminators","md5":"b4d9bfbd89fe3df4a93f55e2c0306057","sha1":"56df91607b3fea3095f54154840bf39f5ecff7a3","sha256":"3e8f0a16aada5ef9fb9e7db2752069d649c2a893e40a3acb4dadc9a3bb2e360d","sha512":"dd261b2389ecf88395e37e7c0e5cce59a80624123123397ce4c26f79cbaeba34ff66adbbdbbe38221dc7786689607737c0b704f141193e54d22aeeeaa0615d74","ssdeep":"96:isJai6x+mAGmto/C/zxm3PL5TsoeJ2S+ry5fIzE32P8gLfhRLnCFKufMrp0AtTJ7:RJaiOAJtCwxm3PL5TsRYZry5fIk2P8Cb","tlshash":"86c1e9f93ed3b32643ac39e64016214cf6bf5659983ed810fb50972b25e4985c7eaf04","first_seen":"2026-08-19T23:18:45.272261Z","last_seen":"2026-08-19T23:18:45.272261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/~flock.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.925Z","timestamp":1787181490925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e4992b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-20T01:23:55.622587Z","times_seen":15800,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/_serverFn/95a516e15435746ddbff73ef3dd41998533dc8d5aa46c26fdaeabc11ab043103","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:11.228Z","timestamp":1787181491228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /_serverFn/95a516e15435746ddbff73ef3dd41998533dc8d5aa46c26fdaeabc11ab043103 HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nx-tsr-serverfn: true\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:12 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce0402a3ab515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":574,"mime_type":"application/json","magic":"JSON text data","md5":"0230b9f6f4b556390edbaf8ff9cdd9fc","sha1":"373002a26a75206bd8e08b2226df4d2d7aa28930","sha256":"2a57c3fa3433099b87869f519f9ceffae0bf4a7200f66dbb9a31d20d3030d075","sha512":"30e5ebbe6fdbf88bea5e98553af8da895e380009880601400341f8f232e862886bde1b9cc56049dcc96199c19a677bb0ba285444842d6ddeac458fdee1a9a1d0","ssdeep":"","tlshash":"63d0c9bd081d642fb644ec118997a097cac207d94be28580825da65d22c221a6702b62","first_seen":"2026-08-19T23:18:45.275146Z","last_seen":"2026-08-19T23:18:45.275146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/~api/analytics","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:11.381Z","timestamp":1787181491381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nContent-Type: application/json\r\nContent-Length: 332\r\nOrigin: https://app-wefi.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP; session-id=8191ae5d-c2fb-44d5-ac42-c383569971fe\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":332,"data":"{\"timestamp\":\"2026-08-19T23:18:11.379Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"8191ae5d-c2fb-44d5-ac42-c383569971fe\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://app-wefi.co/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Wed, 19 Aug 2026 23:18:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2dce0411a9cb515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-08-20T01:23:55.651729Z","times_seen":5469,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/index-CVLIJyIG.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.917Z","timestamp":1787181490917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /assets/index-CVLIJyIG.js HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e3987b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547858,"size_decoded":158588,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43795)","md5":"32a8d77bd0c50ed9b432dff5aedef007","sha1":"8f69d442d2d9e647ffc706de16045b5a61ed7972","sha256":"cf00bec081b9640bfca836fbb3c7e70724b6d76ab006a67275123a5ecb0b022c","sha512":"cd28bc688d344697b0d5961a052b89a14413ee8632a942f7489847268236bbdc890527365f6937bc5dfdf577625625dbb004b02ecd74f543cdf71857af1d8ce4","ssdeep":"6144:E+iC6gqT3CMB7JjlQtnaYAVQ9m0vU+kcCnT40Ypwv2lJIrxiRnDGz2pKVkpqpQEP:GCUQaY+alLRDGSXkq5H8","tlshash":"a4c45ee833a6b1220bd651b2407f1502f33918566c0d4428b678eddf79f5849e6bbfb8","first_seen":"2026-08-19T23:18:45.277844Z","last_seen":"2026-08-19T23:18:45.277844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-wefi.co/assets/routes-CyB7m1d1.js","fqdn":"app-wefi.co","domain":"app-wefi.co","tld":"co"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-wefi.co/","date":"2026-08-19T23:18:10.920Z","timestamp":1787181490920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-wefi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:41:12 GMT","end":"Mon, 16 Nov 2026 14:41:09 GMT"},"fingerprint":{"sha1":"72:BB:35:30:3D:98:BC:07:0F:32:0D:3C:46:54:AF:1E:E8:04:A2:AB","sha256":"2F:32:6B:A4:B8:E5:06:EC:FE:61:A2:13:3A:DB:E2:5D:BD:9D:7C:70:64:0A:9C:D6:04:3A:7C:21:45:3F:B3:BC"}}},"request":{"raw":"GET /assets/routes-CyB7m1d1.js HTTP/1.1\r\nHost: app-wefi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app-wefi.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637; __cf_bm=ICDr02PBhdL9AxvlP9XNsdfr0P539yATgKeinan6.L4-1787181490.1771011-1.0.1.1-cjAglbXI5iAP5MX.bS6zYVp3coNUzFPsrh07MUJastjexzhyFEx5sjIuPmPcSxFtCbAyefQeu32usk0wazy.d__G3omPP3Aq_eZHlVwmFEd.vtGYsBYbzLjQ1GA3yCdP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 23:18:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 637813afacf49397b86942f4dd57c986f97898b26c106cdf97416bc869f0b637\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2dce03e3989b515-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15317,"size_decoded":4937,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7292)","md5":"59889b56ef38de3ad88e7d40029cc019","sha1":"7ee5db7c661e40fda8de3a34659fb2f95d7be258","sha256":"d6ebb4501bcfa9398ee8670cb00b44541aeaa127d46d7bbe541153aaa25be5d7","sha512":"d6b7c4b88890e54633b51352d6ed5fd8781c350f08fb92a20aa486d71da7398447a5aaafaccee5e08944070d95bf0c2e345d14cda5d91a5433a5915a1ca93a7c","ssdeep":"192:VMPHjYwQTVihd0kwPQfg4Ieeecooy9D7yfD+ysy4HTly17wyyeZBye7TywIyH8yd:WH9sMT0k8O9I35odrtJsVefhKjg/lC","tlshash":"b562b699a28135d9f62709e0b36fc12d31bfd107e91b8d697a7c38421f118c87b96f86","first_seen":"2026-08-19T23:18:45.28008Z","last_seen":"2026-08-19T23:18:45.28008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
